Aubio is vulnerable to denial of service via aubio_pitch_set_unit function

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2018-14522 · ADVISORY
• aubio/aubio · WEB
• aubio/aubio commit 99c7aa2 · WEB
• aubio/aubio · PACKAGE
• pypa/advisory-database · WEB
• lists.opensuse.org/opensuse-security-announce/2019-03/msg00031.html · WEB
• lists.opensuse.org/opensuse-security-announce/2019-04/msg00071.html · WEB
• GitHub Advisory GHSA-g7g8-mx45-x4c8 · ADVISORY

Lỗ hổng khác của aubio

• CVE-2018-19802CAO 7.5aubio v0.4.0 to v0.4.8 has a new_aubio_onset NULL pointer dereference.
• CVE-2018-19801CAO 7.5aubio v0.4.0 to v0.4.8 has a NULL pointer dereference in new_aubio_filterbank via invalid n_filters.
• CVE-2018-19800NGHIÊM TRỌNG 9.8aubio v0.4.0 to v0.4.8 has a Buffer Overflow in new_aubio_tempo.
• CVE-2018-14523CAO 8.8An issue was discovered in aubio 0.4.6. A buffer over-read can occur in new_aubio_pitchyinfft in pitch/pitchyinfft.c, as demonstrated by aub…
• CVE-2018-14521CAO 8.8An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_source_avcodec_readframe in io/source_avcodec.c, as demonstrated by…