pkg:Debian/lame

所有已知漏洞

• CRITICAL9.8CVE-2017-11720There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file.
  from 0, < 3.99.5+repack1-6
• HIGH7.8CVE-2017-15019LAME 3.99.5 has a NULL Pointer Dereference in the hip_decode_init function within libmp3lame/mpglib_interface.c via a malformed mpg file, b…
  from 0, < 3.100-1
• HIGH7.8CVE-2017-9872The III_dequantize_sample function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attac…
  from 0, < 3.99.5+repack1-8
• HIGH7.8CVE-2017-9871The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to c…
  from 0, < 3.99.5+repack1-8
• HIGH7.8CVE-2017-8419LAME through 3.99.5 relies on the signed integer data type for values in a WAV or AIFF header, which allows remote attackers to cause a den…
  from 0, < 3.99.5+repack1-7
• HIGH7.5CVE-2017-13712NULL Pointer Dereference in the id3v2AddAudioDuration function in libmp3lame/id3tag.c in LAME 3.99.5 allows attackers to perform Denial of…
  from 0, < 3.100-1
• MEDIUM5.5CVE-2017-15046LAME 3.99.5, 3.99.4, 3.98.4, 3.98.2, 3.98 and 3.97 have a stack-based buffer overflow in unpack_read_samples in frontend/get_audio.c, a dif…
  from 0, < 3.99.5+repack1-8
• MEDIUM5.5CVE-2017-15045LAME 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4, 3.99.5, 3.98.4, 3.98.2 and 3.98 has a heap-based buffer over-read in fill_buffer in libmp3lame/u…
  from 0, < 3.99.5+repack1-8
• MEDIUM5.5CVE-2017-15018LAME 3.99.5, 3.99.4, 3.99.3, 3.99.2, 3.99.1, 3.99, 3.98.4, 3.98.2 and 3.98 have a heap-based buffer over-read when handling a malformed fil…
  from 0, < 3.99.5+repack1-8
• MEDIUM5.5CVE-2017-9412The unpack_read_samples function in frontend/get_audio.c in LAME 3.99.5 allows remote attackers to cause a denial of service (invalid memor…
  from 0, < 3.99.5+repack1-7
• MEDIUM5.5CVE-2017-9870The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to c…
  from 0, < 3.99.5+repack1-8
• MEDIUM5.5CVE-2017-9869The II_step_one function in layer2.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to ca…
  from 0, < 3.99.5+repack1-8
• MEDIUM5.5CVE-2015-9101The fill_buffer_resample function in util.c in libmp3lame.a in LAME 3.98.4, 3.98.2, 3.98, 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4 and 3.99.5 a…
  from 0, < 3.99.5+repack1-6
• MEDIUM5.5CVE-2015-9100The fill_buffer_resample function in util.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service (NULL point…
  from 0, < 3.99.5+repack1-6
• MEDIUM5.5CVE-2015-9099The lame_init_params function in lame.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service (invalid read a…
  from 0, < 3.99.5+repack1-6