An issue was discovered in aubio 0.4.6. A buffer over-read can occur in new_aubio_pitchyinfft in pitch/pitchyinfft.c, as demonstrated by aubionotes.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in aubio 0.4.6. A buffer over-read can occur in new_aubio_pitchyinfft in     pitch/pitchyinfft.c, as demonstrated by aubionotes. (CVE-2018-14523)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An issue was discovered in aubio 0.4.6. A buffer over-read can occur in new_aubio_pitchyinfft in
    pitch/pitchyinfft.c, as demonstrated by aubionotes. (CVE-2018-14523)

This update for aubio fixes the following issues :

  - CVE-2018-14522: Fixed a crash in aubio_pitch_set_unit     (bsc#1102359)

  - CVE-2018-14523: Fixed a buffer overrread resulting in     crash or information leakage in new_aubio_pitchyinfft     (bsc#1102364)

ID	Name	Product	Family	Type	Severity
258633	Linux Distros Unpatched Vulnerability : CVE-2018-14523	Nessus	Misc.	Local	high
431776	SCA: security update for aubio (GHSA-3x58-8qmv-wqw5)	Tenable Cloud Security	SCA Checks	Local	high
431776	SCA: security update for aubio (GHSA-3x58-8qmv-wqw5)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
123264	openSUSE Security Update : aubio (openSUSE-2019-603)	Nessus	SuSE Local Security Checks	Local	high
111808	openSUSE Security Update : aubio (openSUSE-2018-868)	Nessus	SuSE Local Security Checks	Local	high

Detections

Analytics

CVE-2018-14523

high

Tenable Plugins

high

high

high

high

high