远程 Oracle Linux 9 主机上安装的多个程序包受到 ELSA-2022-8139 公告中提及的一个漏洞影响。

  - 在 Wavpack 5.4.0 中，处理 *.WAV 文件时发现越界读取漏洞。此问题在 src/pack_utils.c 文件的 WavpackPackSamples 函数中触发，受感染的变量 cnt 过大，造成 sptr 指针读取数据时超出堆边界。(CVE-2021-44269)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

远程 CentOS Linux 9 主机上安装的多个程序包受到 wavpack-5.4.0-5.el9 版本变更日志中提及的一个漏洞影响。

  - 堆越界读取 (CVE-2021-44269)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

According to the versions of the wavpack package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An out of bounds read was found in Wavpack 5.4.0 in processing *.WAV files. This issue triggered in     function WavpackPackSamples of file src/pack_utils.c, tainted variable cnt is too large, that makes     pointer sptr read beyond heap bound. (CVE-2021-44269)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7558 advisory.

    WavPack is a completely open audio compression format providing lossless, high-quality lossy and a unique     hybrid compression mode.

    Security Fix(es):

    * wavpack: Heap out-of-bounds read in WavpackPackSamples() (CVE-2021-44269)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.7 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7558 advisory.

    - CVE-2021-44269 wavpack: heap Out-of-bounds Read

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7558 advisory.

  - An out of bounds read was found in Wavpack 5.4.0 in processing *.WAV files. This issue triggered in     function WavpackPackSamples of file src/pack_utils.c, tainted variable cnt is too large, that makes     pointer sptr read beyond heap bound. (CVE-2021-44269)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An out of bounds read was found in Wavpack 5.4.0 in processing *.WAV files. This issue triggered in     function WavpackPackSamples of file src/pack_utils.c, tainted variable cnt is too large, that makes     pointer sptr read beyond heap bound. (CVE-2021-44269)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名稱	產品	系列	已發布	已更新	嚴重性
168118	Oracle Linux 9：wavpack (ELSA-2022-8139)	Nessus	Oracle Linux Local Security Checks	2022/11/22	2024/10/22	medium
191243	CentOS 9：wavpack-5.4.0-5.el9	Nessus	CentOS Local Security Checks	2024/2/29	2024/4/26	medium
162455	EulerOS 2.0 SP8 : wavpack (EulerOS-SA-2022-1954)	Nessus	Huawei Local Security Checks	2022/6/22	2023/10/19	medium
167097	RHEL 8 : wavpack (RHSA-2022:7558)	Nessus	Red Hat Local Security Checks	2022/11/8	2024/11/7	medium
167581	Oracle Linux 8 : wavpack (ELSA-2022-7558)	Nessus	Oracle Linux Local Security Checks	2022/11/16	2024/10/22	medium
167828	Rocky Linux 8 : wavpack (RLSA-2022:7558)	Nessus	Rocky Linux Local Security Checks	2022/11/17	2023/11/7	medium
224130	Linux Distros Unpatched Vulnerability : CVE-2021-44269	Nessus	Misc.	2025/3/5	2025/9/2	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium

medium