CVE-2017-6888

MEDIO 5.5CVE-2017-6888 · Published 25/04/2018 · updated 17/06/2026

En resumen

CVE-2017-6888 es una vulnerabilidad MEDIO (CVSS 5.5) que afecta a flac (flac project).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.3%, mayor que el 71.4% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
flac flac_project	`≤ 1.3.2`	No fix yet

Description

An error in the "read_metadata_vorbiscomment_()" function (src/libFLAC/stream_decoder.c) in FLAC version 1.3.2 can be exploited to cause a memory leak via a specially crafted FLAC file.

References

git.xiph.org
lists.debian.org/debian-lts-announce/2021/01/msg00001.html · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33W6XZAAEJYRGU3XYHRO7XSYEA7YACUB
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KNZYTAU5UWBVXVJ4VHDWPR66ZVDLQZRE
secuniaresearch.flexerasoftware.com/advisories/82639 · Third Party Advisory
secuniaresearch.flexerasoftware.com/secunia_research/2017-7 · Third Party Advisory

Más vulnerabilidades de flac

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free