Vulnerability Details CVE-2017-15955
bchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to an "Access violation near NULL on destination operand" and crash when processing a malformed CUE (.cue) file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 48.4%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 4.3
References
- https://github.com/extramaster/bchunk/issues/4
- https://github.com/hessu/bchunk/issues/2
- https://lists.debian.org/debian-lts-announce/2017/11/msg00001.html
- https://www.debian.org/security/2017/dsa-4026
- https://github.com/extramaster/bchunk/issues/4
- https://github.com/hessu/bchunk/issues/2
- https://lists.debian.org/debian-lts-announce/2017/11/msg00001.html
- https://www.debian.org/security/2017/dsa-4026
Products affected by CVE-2017-15955
-
cpe:2.3:a:bchunk_project:bchunk:1.2.0
-
cpe:2.3:a:bchunk_project:bchunk:1.2.1
-
cpe:2.3:o:debian:debian_linux:8.0