PatchTheCVEaubio vulnerabilities and fixes
Recent CVEs affecting aubio, with upgrade or downgrade steps. 9 tracked.
aubio has 9 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2019-06-07. Highest priority: CVE-2018-14523 (score 61/100).
- CVE-2018-19802 HIGH 7.5 UPGRADE aubio v0.4.0 to v0.4.8 has a new_aubio_onset NULL pointer dereference.
- CVE-2018-19801 HIGH 7.5 UPGRADE aubio v0.4.0 to v0.4.8 has a NULL pointer dereference in new_aubio_filterbank via invalid n_filters.
- CVE-2018-19800 CRITICAL 9.8 UPGRADE aubio v0.4.0 to v0.4.8 has a Buffer Overflow in new_aubio_tempo.
- CVE-2018-14523 HIGH 8.8 DOWNGRADE MITIGATE An issue was discovered in aubio 0.4.6
- CVE-2018-14522 HIGH 8.8 DOWNGRADE MITIGATE An issue was discovered in aubio 0.4.6
- CVE-2018-14521 HIGH 8.8 DOWNGRADE An issue was discovered in aubio 0.4.6
- CVE-2017-17555 MEDIUM 6.5 DOWNGRADE DOWNGRADE The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3
- CVE-2017-17554 MEDIUM 5.5 DOWNGRADE A NULL pointer dereference (DoS) Vulnerability was found in the function aubio_source_avcodec_readframe in io/
- CVE-2017-17054 MEDIUM 5.5 DOWNGRADE In aubio 0.4.6, a divide-by-zero error exists in the function new_aubio_source_wavread() in source_wavread.c,
FAQ
How do I fix aubio vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is aubio being exploited right now?
None of the tracked aubio CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which aubio CVE should I patch first?
CVE-2018-14523 currently ranks highest (61/100): An issue was discovered in aubio 0.4.6.