SUSE-SU-2018:3610-1

CVE-2018-17098: The WavFileBase class allowed remote attackers to cause a denial of service (heap corruption from size inconsistency) or possibly have unspecified other impact, as demonstrated by SoundStretch. (bsc#1108632)
CVE-2018-17097: The WavFileBase class allowed remote attackers to cause a denial of service (double free) or possibly have unspecified other impact, as demonstrated by SoundStretch. (double free) (bsc#1108631)
CVE-2018-17096: The BPMDetect class allowed remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch. (bsc#1108630)

References

Affected packages

Name: soundtouch
Purl: pkg:rpm/suse/soundtouch&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.0-3.6.1

{
    "binaries": [
        {
            "soundtouch-devel": "1.8.0-3.6.1",
            "libSoundTouch0": "1.8.0-3.6.1"
        }
    ]
}