CVE-2008-5008

CRITICAL 9.3CVE-2008-5008 · Published 10/11/2008 · updated 16/06/2026

In short

CVE-2008-5008 is a CRITICAL (CVSS 9.3) vulnerability affecting secret rabbit code (mega-nerd).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
secret rabbit code mega-nerd	`= 0.0.0= 0.0.11= 0.0.12= 0.0.13= 0.0.14= 0.0.15= 0.0.2= 0.0.7= 0.0.9= 0.1.0= 0.1.1= 0.1.2≤ 0.1.3`	No fix yet

Description

Buffer overflow in src/src_sinc.c in Secret Rabbit Code (aka SRC or libsamplerate) before 0.1.4, when "extreme low conversion ratios" are used, allows user-assisted attackers to have an unknown impact via a crafted audio file.

References

security.gentoo.org/glsa/glsa-200812-05.xml
mandriva.com/security/advisories
mega-nerd.com/SRC/ChangeLog
openwall.com/lists/oss-security/2008/11/03/6
securityfocus.com/bid/32090
exchange.xforce.ibmcloud.com/vulnerabilities/46542

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free