CVE-2017-11549 on Ubuntu 18.04 LTS (bionic) - medium.
Description:
The play_midi function in playmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mid file. NOTE: CPU consumption might be relevant when using the