CVE-2017-11720
lame: Multiple vulnerabilities
Sévérité par source
Le label propre à Trivy est CRITICAL. Critique selon NVD. Plus basse selon Ubuntu (moyenne), Red Hat (faible).
Description
There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| alpine 3.10 | lame | 3.99.5-r6 |
| alpine 3.11 | lame | 3.99.5-r6 |
| alpine 3.12 | lame | 3.99.5-r6 |
| alpine 3.13 | lame | 3.99.5-r6 |
| alpine 3.14 | lame | 3.99.5-r6 |
| alpine 3.15 | lame | 3.99.5-r6 |
| alpine 3.16 | lame | 3.99.5-r6 |
| alpine 3.17 | lame | 3.99.5-r6 |
| alpine 3.18 | lame | 3.99.5-r6 |
| alpine 3.19 | lame | 3.99.5-r6 |
| alpine 3.20 | lame | 3.99.5-r6 |
| alpine 3.21 | lame | 3.99.5-r6 |
Afficher les 35 entrées de 32 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| alpine 3.10 | lame | 3.99.5-r6 |
| alpine 3.11 | lame | 3.99.5-r6 |
| alpine 3.12 | lame | 3.99.5-r6 |
| alpine 3.13 | lame | 3.99.5-r6 |
| alpine 3.14 | lame | 3.99.5-r6 |
| alpine 3.15 | lame | 3.99.5-r6 |
| alpine 3.16 | lame | 3.99.5-r6 |
| alpine 3.17 | lame | 3.99.5-r6 |
| alpine 3.18 | lame | 3.99.5-r6 |
| alpine 3.19 | lame | 3.99.5-r6 |
| alpine 3.20 | lame | 3.99.5-r6 |
| alpine 3.21 | lame | 3.99.5-r6 |
| alpine 3.22 | lame | 3.99.5-r6 |
| alpine 3.23 | lame | 3.99.5-r6 |
| alpine 3.24 | lame | 3.99.5-r6 |
| alpine 3.3 | lame | 3.99.5-r6 |
| alpine 3.4 | lame | 3.99.5-r6 |
| alpine 3.5 | lame | 3.99.5-r6 |
| alpine 3.6 | lame | 3.99.5-r6 |
| alpine 3.7 | lame | 3.99.5-r6 |
| alpine 3.8 | lame | 3.99.5-r6 |
| alpine 3.9 | lame | 3.99.5-r6 |
| alpine edge | lame | 3.99.5-r6 |
| debian 11 | lame | 3.99.5+repack1-6 |
| debian 12 | lame | 3.99.5+repack1-6 |
| debian 13 | lame | 3.99.5+repack1-6 |
| debian 14 | lame | 3.99.5+repack1-6 |
| debian 7 | lame | 3.99.5+repack1-3+deb7u1 |
| echo | lame | 3.99.5+repack1-6 |
| rapidfort alma 9 | lame | pas de correctif indiqué |
| rapidfort alma 9 | lame-libs | pas de correctif indiqué |
| Red Hat | lame | pas de correctif indiqué |
| Red Hat | lame-devel | pas de correctif indiqué |
| Red Hat | lame-libs | pas de correctif indiqué |
| ubuntu 14.04-ESM | lame | 3.99.5+repack1-3ubuntu1+esm2 |
Références
- https://access.redhat.com/security/cve/CVE-2017-11720
- https://blogs.gentoo.org/ago/2017/06/17/lame-divide-by-zero-in-parse_wave_header-get_audio-c/
- https://bugs.debian.org/777159
- https://nvd.nist.gov/vuln/detail/CVE-2017-11720
- https://sourceforge.net/p/lame/bugs/460/
- https://ubuntu.com/security/notices/USN-4780-1
- https://www.cve.org/CVERecord?id=CVE-2017-11720