USN-5721-1

See a problem?
Source
https://ubuntu.com/security/notices/USN-5721-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5721-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-5721-1
Related
Published
2022-11-10T18:47:06.628507Z
Modified
2022-11-10T18:47:06.628507Z
Summary
wavpack vulnerability
Details

It was discovered that WavPack was not properly performing checks when dealing with memory. If a user were tricked into decompressing a specially crafted WavPack Audio File, an attacker could possibly use this issue to cause the WavPack decompressor to crash, resulting in a denial of service.

References

Affected packages

Ubuntu:Pro:16.04:LTS / wavpack

Package

Name
wavpack
Purl
pkg:deb/ubuntu/wavpack@4.75.2-2ubuntu0.2+esm1?arch=src?distro=esm-infra/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.75.2-2ubuntu0.2+esm1

Affected versions

4.*

4.75.0-1
4.75.2-2
4.75.2-2ubuntu0.1
4.75.2-2ubuntu0.2

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "libwavpack1": "4.75.2-2ubuntu0.2+esm1",
            "libwavpack-dev": "4.75.2-2ubuntu0.2+esm1",
            "wavpack": "4.75.2-2ubuntu0.2+esm1",
            "libwavpack1-dbgsym": "4.75.2-2ubuntu0.2+esm1",
            "wavpack-dbgsym": "4.75.2-2ubuntu0.2+esm1"
        }
    ]
}