CVE-2018-10017
published 2018-04-11CVE-2018-10017: soundlib/Snd_fx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote attackers to cause a denial of service (out-of-bounds read) via an…
PriorityP425medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
EPSS
2.15%
80.3th percentile
soundlib/Snd_fx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote attackers to cause a denial of service (out-of-bounds read) via an IT or MO3 file with many nested pattern loops.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | libopenmpt | < libopenmpt 0.3.8-1 (bookworm) | libopenmpt 0.3.8-1 (bookworm) |
| openmpt | libopenmpt | < 0.3.8 | 0.3.8 |
| openmpt | libopenmpt | >= 0 < 0.3.8-1 | 0.3.8-1 |
| openmpt | libopenmpt | >= 0 < 0.3.8-1 | 0.3.8-1 |
| openmpt | libopenmpt | >= 0 < 0.3.8-1 | 0.3.8-1 |
| openmpt | libopenmpt | >= 0 < 0.3.8-1 | 0.3.8-1 |
| openmpt | openmpt | < 1.27.07.00 | 1.27.07.00 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv6.5MEDIUM
vendor_debian6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
OpenMPT vulnerabilities
vendor_ubuntu·2021-03-15
CVE-2018-11710 OpenMPT vulnerabilities
Title: OpenMPT vulnerabilities
Summary: OpenMPT could be made to crash if it opened a specially crafted
file.
It was discovered that OpenMPT incorrectly handled certain files. A remote
attacker could possibly use this issue to cause a denial of service or
other unspecified impact.
Instructions: In general, a standard system update will make all the necessary changes.
Debian
CVE-2018-10017: libopenmpt - soundlib/Snd_fx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 all...
vendor_debian·2018·CVSS 6.5
CVE-2018-10017 [MEDIUM] CVE-2018-10017: libopenmpt - soundlib/Snd_fx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 all...
soundlib/Snd_fx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote attackers to cause a denial of service (out-of-bounds read) via an IT or MO3 file with many nested pattern loops.
Scope: local
bookworm: resolved (fixed in 0.3.8-1)
bullseye: resolved (fixed in 0.3.8-1)
forky: resolved (fixed in 0.3.8-1)
sid: resolved (fixed in 0.3.8-1)
trixie: resolved (fixed in 0.3.8-1)
GHSA
GHSA-q268-2gqw-g9rg: soundlib/Snd_fx
ghsa_unreviewed·2022-05-13
CVE-2018-10017 [MEDIUM] CWE-125 GHSA-q268-2gqw-g9rg: soundlib/Snd_fx
soundlib/Snd_fx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote attackers to cause a denial of service (out-of-bounds read) via an IT or MO3 file with many nested pattern loops.
OSV
CVE-2018-10017: soundlib/Snd_fx
osv·2018-04-11·CVSS 6.5
CVE-2018-10017 [MEDIUM] CVE-2018-10017: soundlib/Snd_fx
soundlib/Snd_fx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote attackers to cause a denial of service (out-of-bounds read) via an IT or MO3 file with many nested pattern loops.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/OpenMPT/openmpt/commit/7ebf02af2e90f03e0dbd0e18b8b3164f372fb97chttps://lib.openmpt.org/libopenmpt/2018/04/08/security-updates-0.3.8-0.2-beta31-0.2.7561-beta20.5-p8-0.2.7386-beta20.3-p11/https://openmpt.org/openmpt-1-27-07-00-releasedhttps://github.com/OpenMPT/openmpt/commit/7ebf02af2e90f03e0dbd0e18b8b3164f372fb97chttps://lib.openmpt.org/libopenmpt/2018/04/08/security-updates-0.3.8-0.2-beta31-0.2.7561-beta20.5-p8-0.2.7386-beta20.3-p11/https://openmpt.org/openmpt-1-27-07-00-released
2018-04-11
Published