ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2020.0193
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2020-0193)
Resumen:	The remote host is missing an update for the 'dolphin-emu' package(s) announced via the MGASA-2020-0193 advisory.
Descripción:	Summary: The remote host is missing an update for the 'dolphin-emu' package(s) announced via the MGASA-2020-0193 advisory. Vulnerability Insight: Updated dolphin-emu package fixes security vulnerabilities Dolphin Emulator includes a modified copy of the SoundTouch library at version 1.9.2. That version is subject to the following security issues: - The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted wav file (CVE-2017-9258) - The TDStretch::acceptNewOverlapLength function in source/SoundTouch/ TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (memory allocation error and application crash) via a crafted wav file (CVE-2017-9259). - The TDStretchSSE::calcCrossCorr function in source/SoundTouch/ sse_optimized.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted wav file (CVE-2017-9260). - Reachable assertion in RateTransposer::setChannels() causing denial of service (CVE-2018-14044). - Reachable assertion in FIRFilter.cpp causing denial of service (CVE-2018-14045). - Assertion failure in BPMDetect class in BPMDetect.cpp (CVE-2018-17096). - Out-of-bounds heap write in WavOutFile::write() (CVE-2018-17097). - Heap corruption in WavFileBase class in WavFile.cpp (CVE-2018-17098). - Heap-based buffer overflow in SoundStretch/WavFile.cpp:WavInFile ::readHeaderBlock() potentially leading to code execution (CVE-2018-1000223). The bundled copy of SoundTouch was updated to version 2.1.2, thereby solving these, thesis issues in Dolphin Emulator. Affected Software/OS: 'dolphin-emu' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 7.1 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-9258 https://www.exploit-db.com/exploits/42389/ http://seclists.org/fulldisclosure/2017/Jul/62 Common Vulnerability Exposure (CVE) ID: CVE-2017-9259 BugTraq ID: 100095 http://www.securityfocus.com/bid/100095 Common Vulnerability Exposure (CVE) ID: CVE-2017-9260 Common Vulnerability Exposure (CVE) ID: CVE-2018-1000223 Common Vulnerability Exposure (CVE) ID: CVE-2018-14044 https://github.com/TeamSeri0us/pocs/blob/master/soundtouch/readme.md Common Vulnerability Exposure (CVE) ID: CVE-2018-14045 Common Vulnerability Exposure (CVE) ID: CVE-2018-17096 https://github.com/TeamSeri0us/pocs/tree/master/soundtouch/2018_09_03 https://gitlab.com/soundtouch/soundtouch/issues/14 Common Vulnerability Exposure (CVE) ID: CVE-2018-17097 Common Vulnerability Exposure (CVE) ID: CVE-2018-17098 https://github.com/TeamSeri0us/pocs/blob/master/soundtouch/2018_09_03
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.