mpruett Audio File Library 0.3.6 sfconvert Expand3To4Module::run memory corruption

Summaryinfo

A vulnerability categorized as critical has been discovered in mpruett Audio File Library 0.3.6. This affects the function Expand3To4Module::run of the component sfconvert. The manipulation results in memory corruption. This vulnerability is cataloged as CVE-2018-17095. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, was found in mpruett Audio File Library 0.3.6 (Software Library). Affected is the function Expand3To4Module::run of the component sfconvert. The manipulation with an unknown input leads to a memory corruption vulnerability. CWE is classifying the issue as CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert.

The bug was discovered 07/26/2018. The weakness was shared 09/16/2018 (Website). The advisory is shared for download at github.com. This vulnerability is traded as CVE-2018-17095 since 09/16/2018. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Successful exploitation requires user interaction by the victim. There are known technical details, but no exploit is available.

The vulnerability was handled as a non-public zero-day exploit for at least 52 days. During that time the estimated underground price was around $0-$5k. The vulnerability scanner Nessus provides a plugin with the ID 118392 (Ubuntu 14.04 LTS : audiofile vulnerabilities (USN-3800-1)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Ubuntu Local Security Checks and running in the context l. The commercial vulnerability scanner Qualys is able to test this issue with plugin 197285 (Ubuntu Security Notification for Audiofile Vulnerabilities (USN-3800-1)).

Upgrading eliminates this vulnerability. A possible mitigation has been published 2 months after the disclosure of the vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (118392). The entry VDB-120575 is related to this item. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Software Library

Vendor

• mpruett

Name

• Audio File Library

Version

• 0.3.6

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion