CVE-2018-17095

Published: Sep 16, 2018Modified: Aug 13, 2025

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert.

Affected (8)

Products: Audiofile: Audiofile · Canonical: Ubuntu Linux

1 product

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Audiofile Audiofile	Version 0.3.0
Audiofile Audiofile	Version 0.3.1
Audiofile Audiofile	Version 0.3.2
Audiofile Audiofile	Version 0.3.3
Audiofile Audiofile	Version 0.3.4
Audiofile Audiofile	Version 0.3.5
Audiofile Audiofile	Version 0.3.6

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 14.04

Related CWEs

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (6)

https://github.com/mpruett/audiofile/issues/50

Source: cve@mitre.org

ExploitIssue TrackingThird Party Advisory

https://github.com/mpruett/audiofile/issues/51

Source: cve@mitre.org

ExploitIssue TrackingThird Party Advisory

https://usn.ubuntu.com/3800-1/

Source: cve@mitre.org

PatchVendor Advisory

https://github.com/mpruett/audiofile/issues/50

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingThird Party Advisory

https://github.com/mpruett/audiofile/issues/51

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingThird Party Advisory

https://usn.ubuntu.com/3800-1/

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.