CVE:CVE-2018-7253
CNNVD:CNNVD-201802-800
WavPack是一套开源的、免费的音频无损压缩软件。
WavPack 5.1.0版本中的cli/dsdiff.c文件的‘ParseDsdiffHeaderConfig’函数存在缓冲区错误漏洞。远程攻击者可借助恶意制作的DSDIFF文件利用该漏洞造成拒绝服务（基于堆的缓冲区越边界读取）或可能覆盖堆。
solution:Upgrade wavpack wavpack to a higher version than 5.1.0,and avoid the version 5.1.0; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade canonical ubuntu_linux to a higher version than 17.10,and avoid the version 17.10