CVE-2018-20199
Summary
| CVE | CVE-2018-20199 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2018-12-18 01:29:00 UTC |
|---|
| Updated | 2022-04-22 20:40:00 UTC |
|---|
| Description | A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service because adding to windowed output is mishandled in the ONLY_LONG_SEQUENCE case. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Debian -- Security Information -- DSA-5109-1 faad2 |
DEBIAN |
www.debian.org |
|
| Null pointer dereference vulnerability in ifilter_bank(libfaad/filtbank.c:223) · Issue #24 · knik0/faad2 · GitHub |
MISC |
github.com |
Exploit, Third Party Advisory |
| [SECURITY] [DLA 1899-1] faad2 security update |
MLIST |
lists.debian.org |
|
| FAAD2: Multiple vulnerabilities (GLSA 202006-17) — Gentoo security |
GENTOO |
security.gentoo.org |
|
| [SECURITY] [DLA 2792-1] faad2 security update |
MLIST |
lists.debian.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 178843 Debian Security Update for faad2 (DLA 2792-1)
- 179159 Debian Security Update for faad2 (DSA 5109-1)
- 500896 Alpine Linux Security Update for faad2
- 504736 Alpine Linux Security Update for faad2
