Test ID:	1.3.6.1.4.1.25623.1.1.10.2018.0331
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2018-0331)
Summary:	The remote host is missing an update for the 'soundtouch' package(s) announced via the MGASA-2018-0331 advisory.
Description:	Summary: The remote host is missing an update for the 'soundtouch' package(s) announced via the MGASA-2018-0331 advisory. Vulnerability Insight: Updated soundtouch package fixes security vulnerabilities: The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted wav file (CVE-2017-9258). The TDStretch::acceptNewOverlapLength function in source/SoundTouch/ TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (memory allocation error and application crash) via a crafted wav file (CVE-2017-9259). The TDStretchSSE::calcCrossCorr function in source/SoundTouch/ sse_optimized.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted wav file (CVE-2017-9260). Affected Software/OS: 'soundtouch' package(s) on Mageia 6. Solution: Please install the updated package(s). CVSS Score: 7.1 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-9258 https://www.exploit-db.com/exploits/42389/ http://seclists.org/fulldisclosure/2017/Jul/62 Common Vulnerability Exposure (CVE) ID: CVE-2017-9259 BugTraq ID: 100095 http://www.securityfocus.com/bid/100095 Common Vulnerability Exposure (CVE) ID: CVE-2017-9260
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.