aubio up to 0.4.8 filterbank new_aubio_filterbank Argument denial of service

A vulnerability, which was classified as problematic, has been found in aubio up to 0.4.8. This issue affects the function new_aubio_filterbank of the component filterbank. The manipulation as part of a Argument leads to a denial of service vulnerability (Crash). Using CWE to declare the problem leads to CWE-404. Impacted is availability.

The weakness was presented 07/22/2019 (GitHub Repository). The advisory is shared at github.com. The identification of this vulnerability is CVE-2019-1010222 since 03/20/2019. Technical details are known, but no exploit is available.

Applying the patch eda95c9c22b4f0b466ae94c4708765eaae6e709e is able to eliminate this problem.

See 138415 and 138414 for similar entries.

Name

VulDB Meta Base Score: 3.5
VulDB Meta Temp Score: 3.1

VulDB Base Score: ≈3.5
VulDB Temp Score: ≈3.1
VulDB Vector: 🔒
VulDB Reliability: 🔍

VulDB Base Score: 🔒
VulDB Temp Score: 🔒
VulDB Reliability: 🔍
Class: Denial of service / Crash (CWE-404)
Local: Yes
Remote: No

Availability: 🔒
Status: Not defined

Price Prediction: 🔍
Current Price Estimation: 🔒

Threat Intelligenceinfoedit

Threat: 🔍
Adversaries: 🔍
Geopolitics: 🔍
Economy: 🔍
Predictions: 🔍
Remediation: 🔍Recommended: Patch
Status: 🔍

0-Day Time: 🔒

Patch: eda95c9c22b4f0b466ae94c4708765eaae6e709e

03/20/2019 CVE assigned
07/22/2019 +124 days Advisory disclosed
07/23/2019 +1 days VulDB entry created
07/23/2019 +0 days VulDB last updateAdvisory: github.com
Status: Unconfirmed

CVE: CVE-2019-1010222 (🔒)
See also: 🔒

Created: 07/23/2019 06:35 AM
Complete: 🔍

Comments are closed.