CVE:CVE-2018-14523
CNNVD:CNNVD-201807-1779
aubio是一款使用C语言编写的开源音频分析工具。
aubio 0.4.6版本中的pitch/pitchyinfft.c文件的‘new_aubio_pitchyinfft’函数存在缓冲区溢出漏洞。攻击者可利用该漏洞造成缓冲区越界读取。
solution:Upgrade aubio aubio to a higher version than 0.4.6,and avoid the version 0.4.6; Upgrade opensuse leap to a higher version than 15.0,42.3,and avoid the version 15.0,42.3; Upgrade suse linux_enterprise to a higher version than 15.0,and avoid the version 15.0