NULL pointer dereference in WavPack - CVE-2022-2476

Vulnerability identifier: #VU69399

CSH Severity: Low

CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-2476

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the WavePack's main() function at cli/wvunpack.c. A remote attacker can trick the victim to open a specially crafted file and perform a denial of service (DoS) attack.

WavPack
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Storage
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Desktop Applications
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise High Performance Computing
openSUSE Leap
Ubuntu
openEuler
Fedora
wavpack (Ubuntu package)
libwavpack1 (Ubuntu package)
wavpack-debuginfo
libwavpack1-debuginfo
libwavpack1
wavpack-devel
wavpack-debugsource
wavpack
wavpack-help
libwavpack1-32bit-debuginfo
libwavpack1-32bit

Install update from vendor's website.

WavPack - update to 5.5.0
wavpack (Ubuntu package) - update to Ubuntu Pro (Infra-only)
libwavpack1 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
wavpack-debuginfo - addressed in versions 4.60.99-5.12.1, 5.4.0-150000.4.15.1
libwavpack1-debuginfo - addressed in versions 4.60.99-5.12.1, 5.4.0-150000.4.15.1
libwavpack1 - addressed in versions 4.60.99-5.12.1, 5.4.0-150000.4.15.1
wavpack-devel - addressed in versions 4.60.99-5.12.1, 5.4.0-150000.4.15.1
wavpack-debugsource - addressed in versions 4.60.99-5.12.1, 5.4.0-150000.4.15.1
wavpack - addressed in versions 4.60.99-5.12.1, 5.4.0-150000.4.15.1
wavpack-devel - update to 5.3.0-3
wavpack-debugsource - update to 5.3.0-3
wavpack-help - update to 5.3.0-3
wavpack - update to 5.3.0-3
wavpack-debuginfo - update to 5.3.0-3
libwavpack1-32bit-debuginfo - update to 5.4.0-150000.4.15.1
libwavpack1-32bit - update to 5.4.0-150000.4.15.1
wavpack - addressed in versions 5.5.0-2.fc35, 5.5.0-2.fc36

• https://github.com/dbry/WavPack/issues/121
• https://bugzilla.redhat.com/show_bug.cgi?id=2110455
• https://github.com/dbry/WavPack/commit/25b4a2725d8568212e7cf89ca05ca29d128af7ac

• Denial of service in Wavpack
• Ubuntu update for wavpack
• SUSE update for wavpack
• SUSE update for wavpack
• openEuler 22.03 LTS SP3 update for wavpack
• openEuler 22.03 LTS SP4 update for wavpack
• openEuler 22.03 LTS SP1 update for wavpack
• openEuler 20.03 LTS SP4 update for wavpack
• Fedora 36 update for wavpack
• Fedora 35 update for wavpack