Bug 635976 (CVE-2017-5851)

Summary:	media-sound/mp3splt: Denial of Service vulnerability (CVE-2017-5851)
Product:	Gentoo Security	Reporter:	GLSAMaker/CVETool Bot <glsamaker>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED WONTFIX
Severity:	minor	CC:	sound
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	B3 [noglsa cve]
Package list:		Runtime testing required:	---

Description GLSAMaker/CVETool Bot gentoo-dev

2017-10-31 03:10:56 UTC

CVE-2017-5851 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-5851):
  The free_options function in options_manager.c in mp3splt 2.6.2 allows
  remote attackers to cause a denial of service (NULL pointer dereference and
  crash) via a crafted file.  NOTE: this typically has no risk; this crash of
  this command-line program has no further consequences for availability.

Comment 1 Aaron Bauman (RETIRED) gentoo-dev

2019-03-24 17:30:34 UTC

Same as before... upstream cannot reproduce.