CVE-2017-11663
CVE-2017-11663
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The _WM_SetupMidiEvent function in internal_midi.c:2315 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.
CVSS 6.5 · Medium · EPSS 5.7% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
wildmidi Debian:12
- Affected ranges
- ECOSYSTEM: < 0.4.2-1
Update to 0.4.2-1
wildmidi Debian:13
- Affected ranges
- ECOSYSTEM: < 0.4.2-1
Update to 0.4.2-1
wildmidi Debian:14
- Affected ranges
- ECOSYSTEM: < 0.4.2-1
Update to 0.4.2-1
wildmidi Ubuntu:14.04:LTS
- Versions
- 0.2.3.4-2.1ubuntu2
- 0.2.3.4-2.1ubuntu3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
wildmidi Ubuntu:Pro:16.04:LTS
- Versions
- 0.3.8-2
- Affected ranges
- ECOSYSTEM: < 0.3.8-2ubuntu0.1~esm1
Update to 0.3.8-2ubuntu0.1~esm1