OPENSUSE-SU-2024:11505-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2026-09-20 20:20Summary
libwavpack1-32bit-5.4.0-1.6 on GA media
Severity
Moderate
Notes
Title of the patch: libwavpack1-32bit-5.4.0-1.6 on GA media
Description of the patch: These are all security issues fixed in the libwavpack1-32bit-5.4.0-1.6 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2024-11505
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
16 products, the same list as for
CVE-2018-19840
Threats
Impact
low
7.8 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2018-19840
Threats
Impact
important
4 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2018-19840
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2018-19840
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2018-19840
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2018-19840
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2018-19840
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2018-19840
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2018-19840
Threats
Impact
low
8.1 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2018-19840
Threats
Impact
important
References
35 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "libwavpack1-32bit-5.4.0-1.6 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the libwavpack1-32bit-5.4.0-1.6 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-11505",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11505-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-19840 page",
"url": "https://www.suse.com/security/cve/CVE-2018-19840/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-19841 page",
"url": "https://www.suse.com/security/cve/CVE-2018-19841/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6767 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6767/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-7253 page",
"url": "https://www.suse.com/security/cve/CVE-2018-7253/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-7254 page",
"url": "https://www.suse.com/security/cve/CVE-2018-7254/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-1010315 page",
"url": "https://www.suse.com/security/cve/CVE-2019-1010315/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-1010317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-1010317/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-1010318 page",
"url": "https://www.suse.com/security/cve/CVE-2019-1010318/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-1010319 page",
"url": "https://www.suse.com/security/cve/CVE-2019-1010319/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11498 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11498/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-35738 page",
"url": "https://www.suse.com/security/cve/CVE-2020-35738/"
}
],
"title": "libwavpack1-32bit-5.4.0-1.6 on GA media",
"tracking": {
"current_release_date": "2026-09-20T20:20:04Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:11505-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T20:20:04Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libwavpack1-0:5.4.0-1.6.aarch64",
"product": {
"name": "libwavpack1-0:5.4.0-1.6.aarch64",
"product_id": "libwavpack1-0:5.4.0-1.6.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:wavpack:wavpack:5.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libwavpack1@5.4.0-1.6?arch=aarch64\u0026upstream=wavpack-0:5.4.0-1.6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"product": {
"name": "libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"product_id": "libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:wavpack:wavpack:5.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libwavpack1-32bit@5.4.0-1.6?arch=aarch64\u0026upstream=wavpack-0:5.4.0-1.6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "wavpack-0:5.4.0-1.6.aarch64",
"product": {
"name": "wavpack-0:5.4.0-1.6.aarch64",
"product_id": "wavpack-0:5.4.0-1.6.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:wavpack:wavpack:5.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/wavpack@5.4.0-1.6?arch=aarch64\u0026upstream=wavpack-0:5.4.0-1.6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "wavpack-devel-0:5.4.0-1.6.aarch64",
"product": {
"name": "wavpack-devel-0:5.4.0-1.6.aarch64",
"product_id": "wavpack-devel-0:5.4.0-1.6.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:wavpack:wavpack:5.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/wavpack-devel@5.4.0-1.6?arch=aarch64\u0026upstream=wavpack-0:5.4.0-1.6.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libwavpack1-0:5.4.0-1.6.ppc64le",
"product": {
"name": "libwavpack1-0:5.4.0-1.6.ppc64le",
"product_id": "libwavpack1-0:5.4.0-1.6.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:wavpack:wavpack:5.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libwavpack1@5.4.0-1.6?arch=ppc64le\u0026upstream=wavpack-0:5.4.0-1.6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"product": {
"name": "libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"product_id": "libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:wavpack:wavpack:5.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libwavpack1-32bit@5.4.0-1.6?arch=ppc64le\u0026upstream=wavpack-0:5.4.0-1.6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "wavpack-0:5.4.0-1.6.ppc64le",
"product": {
"name": "wavpack-0:5.4.0-1.6.ppc64le",
"product_id": "wavpack-0:5.4.0-1.6.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:wavpack:wavpack:5.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/wavpack@5.4.0-1.6?arch=ppc64le\u0026upstream=wavpack-0:5.4.0-1.6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "wavpack-devel-0:5.4.0-1.6.ppc64le",
"product": {
"name": "wavpack-devel-0:5.4.0-1.6.ppc64le",
"product_id": "wavpack-devel-0:5.4.0-1.6.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:wavpack:wavpack:5.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/wavpack-devel@5.4.0-1.6?arch=ppc64le\u0026upstream=wavpack-0:5.4.0-1.6.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libwavpack1-0:5.4.0-1.6.s390x",
"product": {
"name": "libwavpack1-0:5.4.0-1.6.s390x",
"product_id": "libwavpack1-0:5.4.0-1.6.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:wavpack:wavpack:5.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libwavpack1@5.4.0-1.6?arch=s390x\u0026upstream=wavpack-0:5.4.0-1.6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libwavpack1-32bit-0:5.4.0-1.6.s390x",
"product": {
"name": "libwavpack1-32bit-0:5.4.0-1.6.s390x",
"product_id": "libwavpack1-32bit-0:5.4.0-1.6.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:wavpack:wavpack:5.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libwavpack1-32bit@5.4.0-1.6?arch=s390x\u0026upstream=wavpack-0:5.4.0-1.6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "wavpack-0:5.4.0-1.6.s390x",
"product": {
"name": "wavpack-0:5.4.0-1.6.s390x",
"product_id": "wavpack-0:5.4.0-1.6.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:wavpack:wavpack:5.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/wavpack@5.4.0-1.6?arch=s390x\u0026upstream=wavpack-0:5.4.0-1.6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "wavpack-devel-0:5.4.0-1.6.s390x",
"product": {
"name": "wavpack-devel-0:5.4.0-1.6.s390x",
"product_id": "wavpack-devel-0:5.4.0-1.6.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:wavpack:wavpack:5.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/wavpack-devel@5.4.0-1.6?arch=s390x\u0026upstream=wavpack-0:5.4.0-1.6.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libwavpack1-0:5.4.0-1.6.x86_64",
"product": {
"name": "libwavpack1-0:5.4.0-1.6.x86_64",
"product_id": "libwavpack1-0:5.4.0-1.6.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:wavpack:wavpack:5.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libwavpack1@5.4.0-1.6?arch=x86_64\u0026upstream=wavpack-0:5.4.0-1.6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"product": {
"name": "libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"product_id": "libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:wavpack:wavpack:5.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libwavpack1-32bit@5.4.0-1.6?arch=x86_64\u0026upstream=wavpack-0:5.4.0-1.6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "wavpack-0:5.4.0-1.6.x86_64",
"product": {
"name": "wavpack-0:5.4.0-1.6.x86_64",
"product_id": "wavpack-0:5.4.0-1.6.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:wavpack:wavpack:5.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/wavpack@5.4.0-1.6?arch=x86_64\u0026upstream=wavpack-0:5.4.0-1.6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "wavpack-devel-0:5.4.0-1.6.x86_64",
"product": {
"name": "wavpack-devel-0:5.4.0-1.6.x86_64",
"product_id": "wavpack-devel-0:5.4.0-1.6.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:wavpack:wavpack:5.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/wavpack-devel@5.4.0-1.6?arch=x86_64\u0026upstream=wavpack-0:5.4.0-1.6.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libwavpack1-0:5.4.0-1.6.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64"
},
"product_reference": "libwavpack1-0:5.4.0-1.6.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwavpack1-0:5.4.0-1.6.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le"
},
"product_reference": "libwavpack1-0:5.4.0-1.6.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwavpack1-0:5.4.0-1.6.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x"
},
"product_reference": "libwavpack1-0:5.4.0-1.6.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwavpack1-0:5.4.0-1.6.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64"
},
"product_reference": "libwavpack1-0:5.4.0-1.6.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwavpack1-32bit-0:5.4.0-1.6.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64"
},
"product_reference": "libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwavpack1-32bit-0:5.4.0-1.6.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le"
},
"product_reference": "libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwavpack1-32bit-0:5.4.0-1.6.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x"
},
"product_reference": "libwavpack1-32bit-0:5.4.0-1.6.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwavpack1-32bit-0:5.4.0-1.6.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64"
},
"product_reference": "libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wavpack-0:5.4.0-1.6.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64"
},
"product_reference": "wavpack-0:5.4.0-1.6.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wavpack-0:5.4.0-1.6.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le"
},
"product_reference": "wavpack-0:5.4.0-1.6.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wavpack-0:5.4.0-1.6.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x"
},
"product_reference": "wavpack-0:5.4.0-1.6.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wavpack-0:5.4.0-1.6.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64"
},
"product_reference": "wavpack-0:5.4.0-1.6.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wavpack-devel-0:5.4.0-1.6.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64"
},
"product_reference": "wavpack-devel-0:5.4.0-1.6.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wavpack-devel-0:5.4.0-1.6.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le"
},
"product_reference": "wavpack-devel-0:5.4.0-1.6.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wavpack-devel-0:5.4.0-1.6.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x"
},
"product_reference": "wavpack-devel-0:5.4.0-1.6.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wavpack-devel-0:5.4.0-1.6.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
},
"product_reference": "wavpack-devel-0:5.4.0-1.6.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-19840",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-19840"
}
],
"notes": [
{
"category": "general",
"text": "The function WavpackPackInit in pack_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (resource exhaustion caused by an infinite loop) via a crafted wav audio file because WavpackSetConfiguration64 mishandles a sample rate of zero.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-19840",
"url": "https://www.suse.com/security/cve/CVE-2018-19840"
},
{
"category": "external",
"summary": "SUSE Bug 1120930 for CVE-2018-19840",
"url": "https://bugzilla.suse.com/1120930"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-19840"
},
{
"cve": "CVE-2018-19841",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-19841"
}
],
"notes": [
{
"category": "general",
"text": "The function WavpackVerifySingleBlock in open_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (out-of-bounds read and application crash) via a crafted WavPack Lossless Audio file, as demonstrated by wvunpack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-19841",
"url": "https://www.suse.com/security/cve/CVE-2018-19841"
},
{
"category": "external",
"summary": "SUSE Bug 1120929 for CVE-2018-19841",
"url": "https://bugzilla.suse.com/1120929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-19841"
},
{
"cve": "CVE-2018-6767",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6767"
}
],
"notes": [
{
"category": "general",
"text": "A stack-based buffer over-read in the ParseRiffHeaderConfig function of cli/riff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service attack or possibly have unspecified other impact via a maliciously crafted RF64 file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6767",
"url": "https://www.suse.com/security/cve/CVE-2018-6767"
},
{
"category": "external",
"summary": "SUSE Bug 1079746 for CVE-2018-6767",
"url": "https://bugzilla.suse.com/1079746"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6767"
},
{
"cve": "CVE-2018-7253",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-7253"
}
],
"notes": [
{
"category": "general",
"text": "The ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service (heap-based buffer over-read) or possibly overwrite the heap via a maliciously crafted DSDIFF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-7253",
"url": "https://www.suse.com/security/cve/CVE-2018-7253"
},
{
"category": "external",
"summary": "SUSE Bug 1081692 for CVE-2018-7253",
"url": "https://bugzilla.suse.com/1081692"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-7253"
},
{
"cve": "CVE-2018-7254",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-7254"
}
],
"notes": [
{
"category": "general",
"text": "The ParseCaffHeaderConfig function of the cli/caff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service (global buffer over-read), or possibly trigger a buffer overflow or incorrect memory allocation, via a maliciously crafted CAF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-7254",
"url": "https://www.suse.com/security/cve/CVE-2018-7254"
},
{
"category": "external",
"summary": "SUSE Bug 1081693 for CVE-2018-7254",
"url": "https://bugzilla.suse.com/1081693"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-7254"
},
{
"cve": "CVE-2019-1010315",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-1010315"
}
],
"notes": [
{
"category": "general",
"text": "WavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero. The impact is: Divide by zero can lead to sudden crash of a software/service that tries to parse a .wav file. The component is: ParseDsdiffHeaderConfig (dsdiff.c:282). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/4c0faba32fddbd0745cbfaf1e1aeb3da5d35b9fc.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-1010315",
"url": "https://www.suse.com/security/cve/CVE-2019-1010315"
},
{
"category": "external",
"summary": "SUSE Bug 1141337 for CVE-2019-1010315",
"url": "https://bugzilla.suse.com/1141337"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-1010315"
},
{
"cve": "CVE-2019-1010317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-1010317"
}
],
"notes": [
{
"category": "general",
"text": "WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseCaffHeaderConfig (caff.c:486). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/f68a9555b548306c5b1ee45199ccdc4a16a6101b.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-1010317",
"url": "https://www.suse.com/security/cve/CVE-2019-1010317"
},
{
"category": "external",
"summary": "SUSE Bug 1141339 for CVE-2019-1010317",
"url": "https://bugzilla.suse.com/1141339"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-1010317"
},
{
"cve": "CVE-2019-1010318",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-1010318"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11498. Reason: This candidate is a reservation duplicate of CVE-2019-11498. Notes: All CVE users should reference CVE-2019-11498 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-1010318",
"url": "https://www.suse.com/security/cve/CVE-2019-1010318"
},
{
"category": "external",
"summary": "SUSE Bug 1141338 for CVE-2019-1010318",
"url": "https://bugzilla.suse.com/1141338"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-1010318"
},
{
"cve": "CVE-2019-1010319",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-1010319"
}
],
"notes": [
{
"category": "general",
"text": "WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseWave64HeaderConfig (wave64.c:211). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/33a0025d1d63ccd05d9dbaa6923d52b1446a62fe.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-1010319",
"url": "https://www.suse.com/security/cve/CVE-2019-1010319"
},
{
"category": "external",
"summary": "SUSE Bug 1141334 for CVE-2019-1010319",
"url": "https://bugzilla.suse.com/1141334"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-1010319"
},
{
"cve": "CVE-2019-11498",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11498"
}
],
"notes": [
{
"category": "general",
"text": "WavpackSetConfiguration64 in pack_utils.c in libwavpack.a in WavPack through 5.1.0 has a \"Conditional jump or move depends on uninitialised value\" condition, which might allow attackers to cause a denial of service (application crash) via a DFF file that lacks valid sample-rate data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11498",
"url": "https://www.suse.com/security/cve/CVE-2019-11498"
},
{
"category": "external",
"summary": "SUSE Bug 1133384 for CVE-2019-11498",
"url": "https://bugzilla.suse.com/1133384"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-11498"
},
{
"cve": "CVE-2020-35738",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-35738"
}
],
"notes": [
{
"category": "general",
"text": "WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an integer overflow in a malloc argument. NOTE: some third-parties claim that there are later \"unofficial\" releases through 5.3.2, which are also affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-35738",
"url": "https://www.suse.com/security/cve/CVE-2020-35738"
},
{
"category": "external",
"summary": "SUSE Bug 1180414 for CVE-2020-35738",
"url": "https://bugzilla.suse.com/1180414"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:libwavpack1-32bit-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-0:5.4.0-1.6.x86_64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.aarch64",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.ppc64le",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.s390x",
"openSUSE Tumbleweed:wavpack-devel-0:5.4.0-1.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-35738"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
How durations are calculated
Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.
Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.