Null pointer dereference in audiofile - CVE-2018-13440

Vulnerability identifier: #VU15678

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-13440

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The vulnerability exists in the ModuleState::setup function, as defined in the modules/ModuleState.cpp source code file due to a NULL pointer exception bug. A remote attacker can send a malicious CAF file, trigger a NULL pointer dereference condition and cause the affected application to crash.

audiofile
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
Opensuse
openEuler
Fedora
audiofile (Red Hat package)
audiofile
audiofile-debuginfo
audiofile-debugsource
audiofile-devel
audiofile-help

Update to version 0.3.6-2.

audiofile - update to 0.3.6-2
audiofile (Red Hat package) - update to 0.3.6-9.el7
audiofile - addressed in versions 0.3.6-21.fc27, 0.3.6-21.fc28, 0.3.6-21.fc29
audiofile - update to 0.3.6-32
audiofile-debuginfo - update to 0.3.6-32
audiofile-debugsource - update to 0.3.6-32
audiofile-devel - update to 0.3.6-32
audiofile-help - update to 0.3.6-32

• https://github.com/mpruett/audiofile/issues/49

• Multiple vulnerabilities in audiofile
• OpenSUSE Linux update for audiofile
• Red Hat Enterprise Linux 7 update for audiofile
• Fedora 29 update for audiofile
• Fedora 28 update for audiofile
• Fedora 27 update for audiofile
• openEuler update for audiofile