Executive Summary

Informations
Name CVE-2017-8372 First vendor Publication 2017-04-30
Vendor Cve Last vendor Modification 2019-10-03

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Overall CVSS Score 4.7
Base Score 4.7 Environmental Score 4.7
impact SubScore 3.6 Temporal Score 4.7
Exploitabality Sub Score 1
 
Attack Vector Local Attack Complexity High
Privileges Required None User Interaction Required
Scope Unchanged Confidentiality Impact None
Integrity Impact None Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:H/Au:N/C:N/I:N/A:P)
Cvss Base Score 2.6 Attack Range Network
Cvss Impact Score 2.9 Attack Complexity High
Cvss Expoit Score 4.9 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

The mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b, if NDEBUG is omitted, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted audio file.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8372

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-617 Reachable Assertion

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 1

Nessus® Vulnerability Scanner

Date Description
2019-01-03 Name : The remote Fedora host is missing a security update.
File : fedora_2018-4f9f4d26f0.nasl - Type : ACT_GATHER_INFO
2019-01-03 Name : The remote Fedora host is missing a security update.
File : fedora_2018-f8b87f9d12.nasl - Type : ACT_GATHER_INFO
2018-10-09 Name : The remote Fedora host is missing a security update.
File : fedora_2018-3b14abc9b0.nasl - Type : ACT_GATHER_INFO
2018-05-21 Name : The remote Debian host is missing a security update.
File : debian_DLA-1380.nasl - Type : ACT_GATHER_INFO
2018-05-07 Name : The remote Debian host is missing a security-related update.
File : debian_DSA-4192.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
DEBIAN https://www.debian.org/security/2018/dsa-4192
MISC https://blogs.gentoo.org/ago/2017/04/30/libmad-assertion-failure-in-layer3-c/
MLIST https://lists.debian.org/debian-lts-announce/2018/05/msg00011.html

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
Date Informations
2021-05-04 13:04:57
  • Multiple Updates
2021-04-22 02:18:56
  • Multiple Updates
2020-05-23 01:04:26
  • Multiple Updates
2019-10-03 09:20:36
  • Multiple Updates
2018-05-20 09:18:34
  • Multiple Updates
2018-05-07 09:19:23
  • Multiple Updates
2017-05-11 21:23:56
  • Multiple Updates
2017-05-01 09:23:46
  • First insertion