Bug 1547719 – CVE-2018-7253 wavpack: Heap-based buffer over-read in ParseDsdiffHeaderConfig function in cli/dsdiff.c

Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.

Bug 1547719 - (CVE-2018-7253) CVE-2018-7253 wavpack: Heap-based buffer over-read in ParseDsdiffHeaderConfig function in cli/dsdiff.c

Summary:	CVE-2018-7253 wavpack: Heap-based buffer over-read in ParseDsdiffHeaderConfig...

Status:	CLOSED ERRATA

Aliases:	CVE-2018-7253

Product:	Security Response
Classification:	Other
Component:	vulnerability (Show other bugs)
Sub Component:
Version:	unspecified
Hardware:	All Linux

Priority	low Severity low
Target Milestone:	---
Target Release:	---
Assigned To:	Red Hat Product Security
QA Contact:
Docs Contact:

URL:
Whiteboard:	impact=low,public=20180219,reported=2...
Keywords:	Security

Depends On:	1547721 1547722 1547723 1547724
Blocks:	1547741
	Show dependency tree / graph

Reported:	2018-02-21 14:50 EST by Pedro Sampaio
Modified:	2018-10-05 21:55 EDT (History)
CC List:	4 users (show)

See Also:
Fixed In Version:
Doc Type:	If docs needed, set a value
Doc Text:	An out-of-bounds heap read flaw was found in the way WavPack handled processing of DSD files. An attacker could potentially use this flaw to crash WavPack by tricking it into processing crafted DSD files.
Story Points:	---
Clone Of:
Environment:
Last Closed:	2018-10-05 21:55:01 EDT
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description Pedro Sampaio 2018-02-21 14:50:45 EST

The ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of WavPack 5.1.0 allows an attacker to cause a denial-of-service via heap-based buffer over-read.

Upstream bug:

https://github.com/dbry/WavPack/issues/28

Upstream patch:

https://github.com/dbry/WavPack/commit/36a24c7881427d2e1e4dc1cef58f19eee0d13aec

Comment 1 Pedro Sampaio 2018-02-21 14:51:25 EST

Created mingw-wavpack tracking bugs for this issue:

Affects: epel-7 [bug 1547721]
Affects: fedora-all [bug 1547724]


Created wavpack tracking bugs for this issue:

Affects: fedora-all [bug 1547723]

Comment 5 Sergio Monteiro Basto 2018-10-05 21:55:01 EDT

https://src.fedoraproject.org/rpms/wavpack/c/be8d9f333fca9df19894a907d33aded11cb16cbc?branch=master

Note You need to log in before you can comment on or make changes to this bug.