Vulnerability Details CVE-2018-19802
aubio v0.4.0 to v0.4.8 has a new_aubio_onset NULL pointer dereference.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 76.8%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00063.html
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00067.html
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00012.html
- https://github.com/aubio/aubio/blob/0.4.9/ChangeLog
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IYIKPYXZIWYWWNNORSKWRCFFCP6AFMRZ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OHIRMWW4JQ6UHJK4AVBJLFRLE2TPKC2W/
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00063.html
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00067.html
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00012.html
- https://github.com/aubio/aubio/blob/0.4.9/ChangeLog
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IYIKPYXZIWYWWNNORSKWRCFFCP6AFMRZ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OHIRMWW4JQ6UHJK4AVBJLFRLE2TPKC2W/
Products affected by CVE-2018-19802
-
cpe:2.3:a:aubio:aubio:0.4.0
-
cpe:2.3:a:aubio:aubio:0.4.1
-
cpe:2.3:a:aubio:aubio:0.4.2
-
cpe:2.3:a:aubio:aubio:0.4.3
-
cpe:2.3:a:aubio:aubio:0.4.4
-
cpe:2.3:a:aubio:aubio:0.4.5
-
cpe:2.3:a:aubio:aubio:0.4.6
-
cpe:2.3:a:aubio:aubio:0.4.7
-
cpe:2.3:a:aubio:aubio:0.4.8