Buffer overflow in WavPack - CVE-2018-10538

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU12361

Buffer overflow in WavPack - CVE-2018-10538

Published: May 3, 2018 / Updated: May 3, 2018


Vulnerability identifier: #VU12361
CSH Severity: Medium
CVSS v4: 7.1 [CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-10538
CWE-ID: CWE-190
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to boundary error within ParseRiffHeaderConfig function in riff.c when processing WAV files. A remote unauthenticated attacker can create a specially crafted WAV file, trick the victim into opening it and trigger integer overflow in bytes_to_copy calculation and subsequent malloc call 

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Affected software

WavPack
Debian Linux
Fedora
Slackware Linux
wavpack (Alpine package)
wavpack
mingw-wavpack

How to mitigate CVE-2018-10538


wavpack (Alpine package) - addressed in versions 5.1.0-r2, 5.1.0-r6
wavpack - addressed in versions 5.1.0-8.fc27, 5.1.0-8.fc28
mingw-wavpack - addressed in versions 5.1.0-9.el7, 5.1.0-9.fc30, 5.1.0-9.fc31

External References

Related Security Bulletins