CVE-2018-17097

The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (double free) or possibly have unspecified other impact, as demonstrated by SoundStretch.

References

Affected packages

Debian:11 / soundtouch

Package

Name: soundtouch
Purl: pkg:deb/debian/soundtouch?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.2+ds1-1

Ecosystem specific

{
    "urgency": "low"
}

Debian:12 / soundtouch

Package

Name: soundtouch
Purl: pkg:deb/debian/soundtouch?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.2+ds1-1

Ecosystem specific

{
    "urgency": "low"
}

Debian:13 / soundtouch

Package

Name: soundtouch
Purl: pkg:deb/debian/soundtouch?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.2+ds1-1

Ecosystem specific

{
    "urgency": "low"
}

Git / gitlab.com/soundtouch/soundtouch

Affected ranges

Type: GIT
Repo: https://gitlab.com/soundtouch/soundtouch
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

abf79cf62520eb93a807d7a1a7e5f03c628a4823