Critical Buffer Over-read Vulnerability in WavPack Package
Summary
ALPINE-CVE-2018-6767: A stack-based buffer over-read in the ParseRiffHeaderConfig function of cli/riff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service attack or possibly have unspecified other impact via a malici... Affects wavpack versions < 5.1.0-r3. Fixed in 5.1.0-r3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
WavPack is an open-source audio compression format that provides lossless and lossy compression options. It is widely used for its efficiency in reducing file sizes while maintaining audio quality. The package is utilized in various applications for audio processing and playback. However, it has been identified to contain a critical vulnerability that could be exploited by attackers, leading to potential denial-of-service attacks.
Vulnerability Detail
A stack-based buffer over-read in the ParseRiffHeaderConfig function of the cli/riff.c file of WavPack version 5.1.0 allows a remote attacker to cause a denial-of-service attack or possibly have unspecified other impacts via a maliciously crafted RF64 file. This vulnerability arises from improper handling of input data, which can lead to memory access violations and application crashes.
How To Fix
Minimum fixed version
5.1.0-r3
This is the first release that contains the fix.
sudo apk add --upgrade wavpackTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid processing RF64 files until the package is updated to mitigate the risk of exploitation.
Conclusion
The WavPack package has a critical vulnerability that allows for potential denial-of-service attacks through malicious RF64 files. It is crucial for users to update to the patched versions to ensure their systems remain secure. Utilizing tools like Vulert can help in monitoring for such vulnerabilities in real-time.
See every vulnerability recorded for wavpack →
FAQ
The CVSS score of this vulnerability is 7.8, indicating a high severity level.
All versions prior to 5.1.0-r3 for Alpine v3.10, v3.8, and v3.9, and prior to 5.1.0-r1 for Alpine v3.4, v3.5, v3.6, and v3.7 are affected.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Simply upload your manifest file like package-lock.json to check for vulnerabilities.
Yes, as a temporary measure, you can avoid processing RF64 files until the package is updated.
Detailed information about this vulnerability can be found in the CVE database and the Alpine Linux security advisories.
References
Related vulnerabilities
Recent vulnerabilities recorded for wavpack.
