In aubio 0.4.6, a divide-by-zero error exists in the function new_aubio_source_wavread() in source_wavread.c, which may lead to DoS when playing a crafted audio file.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In aubio 0.4.6, a divide-by-zero error exists in the function new_aubio_source_wavread() in     source_wavread.c, which may lead to DoS when playing a crafted audio file. (CVE-2017-17054)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In aubio 0.4.6, a divide-by-zero error exists in the function new_aubio_source_wavread() in
    source_wavread.c, which may lead to DoS when playing a crafted audio file. (CVE-2017-17054)

This update for aubio fixes the following issues :

  - CVE-2017-17054: Specially crafted wav files could have     been used to cause an application crash (boo#1070399)

ID	Name	Product	Family	Severity
254894	Linux Distros Unpatched Vulnerability : CVE-2017-17054	Nessus	Misc.	medium
433090	SCA: security update for aubio (GHSA-vcwx-8mqh-2557)	Tenable Cloud Security	SCA Checks	high
433090	SCA: security update for aubio (GHSA-vcwx-8mqh-2557)	Tenable Self-Hosted Container Security	SCA Checks	high
108784	openSUSE Security Update : aubio (openSUSE-2018-329)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2017-17054

high

Tenable Plugins

medium

high

high

medium