UBUNTU-CVE-2017-5851
- Source
- https://ubuntu.com/security/CVE-2017-5851
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2017/UBUNTU-CVE-2017-5851.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2017-5851
- Upstream
- Published
- 2017-03-01T15:59:00Z
- Modified
- 2025-07-14T06:59:55.497773Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
- Ubuntu - low
- Summary
- [none]
- Details
-
The freeoptions function in optionsmanager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file. NOTE: this typically has no risk; this crash of this command-line program has no further consequences for availability.
- References
-
- https://ubuntu.com/security/CVE-2017-5851
- http://www.openwall.com/lists/oss-security/2017/02/02/8
- https://github.com/asarubbo/poc/blob/master/00127-mp3splt-nullptr-free_options
- https://blogs.gentoo.org/ago/2017/02/01/mp3splt-null-pointer-dereference-in-free_options-options_manager-c
- https://www.cve.org/CVERecord?id=CVE-2017-5851
Affected packages
Ubuntu:Pro:16.04:LTS / mp3splt
Package
- Name
- mp3splt
- Purl
- pkg:deb/ubuntu/mp3splt@2.4.2-2ubuntu1?arch=source&distro=esm-apps/xenial
Ubuntu:Pro:18.04:LTS / mp3splt
Package
- Name
- mp3splt
- Purl
- pkg:deb/ubuntu/mp3splt@2.6.2+20170630-3?arch=source&distro=esm-apps/bionic
Ubuntu:Pro:20.04:LTS / mp3splt
Package
- Name
- mp3splt
- Purl
- pkg:deb/ubuntu/mp3splt@2.6.2+20170630-3?arch=source&distro=esm-apps/focal
Ubuntu:22.04:LTS / mp3splt
Package
- Name
- mp3splt
- Purl
- pkg:deb/ubuntu/mp3splt@2.6.2+20170630-3.1?arch=source&distro=jammy
Ubuntu:24.04:LTS / mp3splt
Package
- Name
- mp3splt
- Purl
- pkg:deb/ubuntu/mp3splt@2.6.2+20170630-3.2build5?arch=source&distro=noble