Aubio is vulnerable to a NULL pointer dereference in new_aubio_notes function

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2018-19802 · ADVISORY
• aubio/aubio commit c5ee130 · WEB
• aubio/aubio · PACKAGE
• aubio/aubio · WEB
• pypa/advisory-database · WEB
• lists.fedoraproject.org/archives/list/[email protected]/message/IYIKPYXZIWYWWNNORSKWRCFFCP6AFMRZ · WEB
• lists.fedoraproject.org/archives/list/[email protected]/message/OHIRMWW4JQ6UHJK4AVBJLFRLE2TPKC2W · WEB
• lists.opensuse.org/opensuse-security-announce/2019-06/msg00063.html · WEB
• lists.opensuse.org/opensuse-security-announce/2019-06/msg00067.html · WEB
• lists.opensuse.org/opensuse-security-announce/2019-08/msg00003.html · WEB
• lists.opensuse.org/opensuse-security-announce/2019-08/msg00012.html · WEB
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IYIKPYXZIWYWWNNORSKWRCFFCP6AFMRZ
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OHIRMWW4JQ6UHJK4AVBJLFRLE2TPKC2W
• lists.fedoraproject.org/archives/list/[email protected]/message/IYIKPYXZIWYWWNNORSKWRCFFCP6AFMRZ · WEB
• lists.fedoraproject.org/archives/list/[email protected]/message/OHIRMWW4JQ6UHJK4AVBJLFRLE2TPKC2W · WEB
• GitHub Advisory GHSA-c6jq-h4jp-72pr · ADVISORY

aubio のその他の脆弱性

• CVE-2018-19801高 7.5aubio v0.4.0 to v0.4.8 has a NULL pointer dereference in new_aubio_filterbank via invalid n_filters.
• CVE-2018-19800緊急 9.8aubio v0.4.0 to v0.4.8 has a Buffer Overflow in new_aubio_tempo.
• CVE-2018-14523高 8.8An issue was discovered in aubio 0.4.6. A buffer over-read can occur in new_aubio_pitchyinfft in pitch/pitchyinfft.c, as demonstrated by aub…
• CVE-2018-14522高 8.8An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_pitch_set_unit in pitch/pitch.c, as demonstrated by aubionotes.
• CVE-2018-14521高 8.8An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_source_avcodec_readframe in io/source_avcodec.c, as demonstrated by…