CVE-2019-1010315

WavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero. The impact is: Divide by zero can lead to sudden crash of a software/service that tries to parse a .wav file. The component is: ParseDsdiffHeaderConfig (dsdiff.c:282). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/4c0faba32fddbd0745cbfaf1e1aeb3da5d35b9fc.

References

Affected packages

Git / github.com/dbry/wavpack

Affected ranges

Type: GIT
Repo: https://github.com/dbry/wavpack
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

4c0faba32fddbd0745cbfaf1e1aeb3da5d35b9fc

Affected versions

4.*

4.70.0

4.70.0-rc

4.75.0

4.75.0-rc

4.75.2

4.80.0

4.80.0-rc

5.*

5.0.0

5.0.0-alpha

5.0.0-alpha2

5.0.0-alpha3

5.0.0-alpha4

5.0.0-alpha5

5.1.0

Database specific

vanir_signatures

[
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "223468198760209522415530051213008541920",
                "84187453593326026586882747625454283818",
                "132163843864917538956865746258217683812",
                "149093281865590928707150542480114560830",
                "160537748801228162604266018850497886140",
                "324062363246101315545314825330263358563",
                "151004110588990038074576782986706820073",
                "211335790083391097169899251935001656139",
                "224186329449611780722103589186991458818",
                "194087188279309037957911130700133282141",
                "209685013335617579615791023681250803167",
                "165718564101656456956608975705750931563"
            ]
        },
        "target": {
            "file": "cli/dsdiff.c"
        },
        "signature_version": "v1",
        "id": "CVE-2019-1010315-0bfa0e67",
        "deprecated": false,
        "source": "https://github.com/dbry/wavpack/commit/4c0faba32fddbd0745cbfaf1e1aeb3da5d35b9fc",
        "signature_type": "Line"
    },
    {
        "digest": {
            "function_hash": "26431205128459225104067756546612720396",
            "length": 6850.0
        },
        "target": {
            "file": "cli/dsdiff.c",
            "function": "ParseDsdiffHeaderConfig"
        },
        "signature_version": "v1",
        "id": "CVE-2019-1010315-ea81a2de",
        "deprecated": false,
        "source": "https://github.com/dbry/wavpack/commit/4c0faba32fddbd0745cbfaf1e1aeb3da5d35b9fc",
        "signature_type": "Function"
    }
]