A NULL pointer dereference (DoS) Vulnerability was found in the function aubio_source_avcodec_readframe in io/source_avcodec.c of aubio 0.4.6, which may lead to DoS when playing a crafted audio file.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A NULL pointer dereference (DoS) Vulnerability was found in the function aubio_source_avcodec_readframe in     io/source_avcodec.c of aubio 0.4.6, which may lead to DoS when playing a crafted audio file.
    (CVE-2017-17554)

Note that Nessus relies on the presence of the package as reported by the vendor.

This update for aubio fixes the following security issue :

  - CVE-2017-17554: Prevent NULL pointer dereference in the     function aubio_source_avcodec_readframe which may have     lead to DoS when playing a crafted audio file     (bsc#1072317).

ID	Name	Product	Family	Severity
259052	Linux Distros Unpatched Vulnerability : CVE-2017-17554	Nessus	Misc.	medium
123193	openSUSE Security Update : aubio (openSUSE-2019-457)	Nessus	SuSE Local Security Checks	medium
110610	openSUSE Security Update : aubio (openSUSE-2018-652)	Nessus	SuSE Local Security Checks	medium
110609	openSUSE Security Update : aubio (openSUSE-2018-651)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2017-17554

medium

Tenable Plugins

medium

medium

medium

medium