Vulnerability Details CVE-2017-15953
bchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow and crash when processing a malformed CUE (.cue) file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.9%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 4.3
References
- https://github.com/extramaster/bchunk/issues/2
- https://github.com/hessu/bchunk/issues/1
- https://lists.debian.org/debian-lts-announce/2017/11/msg00001.html
- https://www.debian.org/security/2017/dsa-4026
- https://github.com/extramaster/bchunk/issues/2
- https://github.com/hessu/bchunk/issues/1
- https://lists.debian.org/debian-lts-announce/2017/11/msg00001.html
- https://www.debian.org/security/2017/dsa-4026
Products affected by CVE-2017-15953
-
cpe:2.3:a:bchunk_project:bchunk:1.2.0
-
cpe:2.3:a:bchunk_project:bchunk:1.2.1
-
cpe:2.3:o:debian:debian_linux:8.0