PatchTheCVEwildmidi vulnerabilities and fixes
Recent CVEs affecting wildmidi, with upgrade or downgrade steps. 5 tracked.
wildmidi has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2018-01-02. Highest priority: CVE-2017-11662 (score 60/100).
- CVE-2017-11664 MEDIUM 6.5 DOWNGRADE The _WM_SetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (inval
- CVE-2017-11663 MEDIUM 6.5 DOWNGRADE The _WM_SetupMidiEvent function in internal_midi.c:2315 in WildMIDI 0.4.2 can cause a denial of service (inval
- CVE-2017-11662 HIGH 7.5 DOWNGRADE The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read
- CVE-2017-11661 HIGH 7.5 DOWNGRADE The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (inval
- CVE-2017-1000418 HIGH 7.8 UPGRADE The WildMidi_Open function in WildMIDI since commit d8a466829c67cacbb1700beded25c448d99514e5 allows remote att
FAQ
How do I fix wildmidi vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wildmidi being exploited right now?
None of the tracked wildmidi CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wildmidi CVE should I patch first?
CVE-2017-11662 currently ranks highest (60/100): The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read.