SB2019042405 - Multiple vulnerabilities in WavPack

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2019042405

SB2019042405 - Multiple vulnerabilities in WavPack

Published: April 24, 2019 Updated: July 17, 2019

Security Bulletin ID SB2019042405
Severity
Low
Patch available
NO
Number of vulnerabilities 4
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 4 secuirty vulnerabilities.


1) Input validation error (CVE-ID: CVE-2019-11498)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input in the WavpackSetConfiguration64() function in the pack_utils.c file within the libwavpack.a. A remote attacker can trick the victim to open a specially crafted DFF file that lacks valid sample-rate data and crash the affected application. 


2) Improper Initialization (CVE-ID: CVE-2019-1010317)

The vulnerability allows a remote attacker to cause a denial of service (DoS) condition on a targeted system.

The vulnerability exists due to an uninitialized read condition in the "ParseCaffHeaderConfig()" function in the caff.c file when parsing .wav files. A remote attacker can persuade a user to access a .wav file that submits malicious input to the targeted system and perform a DoS attack.


3) Division by zero (CVE-ID: CVE-2019-1010315)

The vulnerability allows a remote attacker to cause a denial of service (DoS) condition on a targeted system.

The vulnerability exists due to a divide by zero error in the "ParseDsdiffHeaderConfig()" function in the "dsdiff.c" file, when parsing .wav files. 

A remote attacker can trick a victim to open a specially crafted .wav file and crash the affected application.



4) Improper Initialization (CVE-ID: CVE-2019-1010319)

The vulnerability allows a remote attacker to cause a denial of service (DoS) condition on the targeted system.

The vulnerability exists due to an uninitialized read condition in the "ParseWave64HeaderConfig()" function in "wave64.c" file when parsing .wav files. A remote attacker can trick a victim to open a specially crafted .wav file and crash the affected application.


Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References