Test ID:	1.3.6.1.4.1.25623.1.1.10.2020.0193
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2020-0193)
Summary:	The remote host is missing an update for the 'dolphin-emu' package(s) announced via the MGASA-2020-0193 advisory.
Description:	Summary: The remote host is missing an update for the 'dolphin-emu' package(s) announced via the MGASA-2020-0193 advisory. Vulnerability Insight: Updated dolphin-emu package fixes security vulnerabilities Dolphin Emulator includes a modified copy of the SoundTouch library at version 1.9.2. That version is subject to the following security issues: - The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted wav file (CVE-2017-9258) - The TDStretch::acceptNewOverlapLength function in source/SoundTouch/ TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (memory allocation error and application crash) via a crafted wav file (CVE-2017-9259). - The TDStretchSSE::calcCrossCorr function in source/SoundTouch/ sse_optimized.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted wav file (CVE-2017-9260). - Reachable assertion in RateTransposer::setChannels() causing denial of service (CVE-2018-14044). - Reachable assertion in FIRFilter.cpp causing denial of service (CVE-2018-14045). - Assertion failure in BPMDetect class in BPMDetect.cpp (CVE-2018-17096). - Out-of-bounds heap write in WavOutFile::write() (CVE-2018-17097). - Heap corruption in WavFileBase class in WavFile.cpp (CVE-2018-17098). - Heap-based buffer overflow in SoundStretch/WavFile.cpp:WavInFile ::readHeaderBlock() potentially leading to code execution (CVE-2018-1000223). The bundled copy of SoundTouch was updated to version 2.1.2, thereby solving these, thesis issues in Dolphin Emulator. Affected Software/OS: 'dolphin-emu' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 7.1 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-9258 https://www.exploit-db.com/exploits/42389/ http://seclists.org/fulldisclosure/2017/Jul/62 Common Vulnerability Exposure (CVE) ID: CVE-2017-9259 BugTraq ID: 100095 http://www.securityfocus.com/bid/100095 Common Vulnerability Exposure (CVE) ID: CVE-2017-9260 Common Vulnerability Exposure (CVE) ID: CVE-2018-1000223 Common Vulnerability Exposure (CVE) ID: CVE-2018-14044 https://github.com/TeamSeri0us/pocs/blob/master/soundtouch/readme.md Common Vulnerability Exposure (CVE) ID: CVE-2018-14045 Common Vulnerability Exposure (CVE) ID: CVE-2018-17096 https://github.com/TeamSeri0us/pocs/tree/master/soundtouch/2018_09_03 https://gitlab.com/soundtouch/soundtouch/issues/14 Common Vulnerability Exposure (CVE) ID: CVE-2018-17097 Common Vulnerability Exposure (CVE) ID: CVE-2018-17098 https://github.com/TeamSeri0us/pocs/blob/master/soundtouch/2018_09_03
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.