CVE-2017-8374

libmad0: The mad_bit_skip function in bit.c in Underbit MAD libmad 0.15.1b allows remote attackers to cause a denial of servic...

CVE-2017-8374 is fixed in libmad0 on 1 platform by libmad0 0.15.1b-9ubuntu18.04.1 (version 0.15.1b-9ubuntu18.04.1), released April 30, 2017. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0223
82nd percentile

The mad_bit_skip function in bit.c in Underbit MAD libmad 0.15.1b allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file.

Where it's fixed

ProductFixed inFixReleased
Linux
libmad0 · Ubuntu 18.04.6 LTS (bionic) 0.15.1b-9ubuntu18.04.1 libmad0 0.15.1b-9ubuntu18.04.1 Apr 30, 2017