CVE-2019-1010315

 

Published at: - 11-07-2019 10:15

Last modified: - 07-10-2022 05:06

Total changes: - 4

Description

WavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero. The impact is: Divide by zero can lead to sudden crash of a software/service that tries to parse a .wav file. The component is: ParseDsdiffHeaderConfig (dsdiff.c:282). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/4c0faba32fddbd0745cbfaf1e1aeb3da5d35b9fc.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

 

Verification logic

 

Reference

• https://github.com/dbry/WavPack/issues/65
• https://github.com/dbry/WavPack/commit/4c0faba32fddbd0745cbfaf1e1aeb3da5d35b9fc
• USN-4062-1-Third Party Advisory
• FEDORA-2020-e55567b6be-Mailing List, Third Party Advisory
• FEDORA-2020-73274c9df4-Mailing List, Third Party Advisory
• [debian-lts-announce] 20210115 [SECURITY] [DLA 2525-1] wavpack security update-Mailing List, Third Party Advisory

 

Keywords

NVD

 

CVE-2019-1010315

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures