Vulnerability Name:

CVE-2021-44269 (CCN-221610)

Assigned:2021-11-23
Published:2021-11-23
Updated:2022-09-09
Summary:An out of bounds read was found in Wavpack 5.4.0 in processing *.WAV files. This issue triggered in function WavpackPackSamples of file src/pack_utils.c, tainted variable cnt is too large, that makes pointer sptr read beyond heap bound.
CVSS v3 Severity:5.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
4.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
5.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
4.8 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
3.5 Low (REDHAT CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L)
3.1 Low (REDHAT Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): Required
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
4.6 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:N/I:N/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
Vulnerability Type:CWE-125
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2021-44269

Source: XF
Type: UNKNOWN
wavpack-cve202144269-dos(221610)

Source: CCN
Type: Wavpack GIT Repository
A heap Out-of-bounds Read in WavpackPackSamples (src/pack_utils.c) #110

Source: MISC
Type: Exploit, Patch, Third Party Advisory
https://github.com/dbry/WavPack/issues/110

Source: FEDORA
Type: Mailing List, Third Party Advisory
FEDORA-2022-737f020ede

Source: FEDORA
Type: Mailing List, Third Party Advisory
FEDORA-2022-cece705cbf

Source: FEDORA
Type: Mailing List, Third Party Advisory
FEDORA-2022-0fc7b22bcd

Source: FEDORA
Type: Mailing List, Third Party Advisory
FEDORA-2022-8e94ec2244

Source: FEDORA
Type: Mailing List, Third Party Advisory
FEDORA-2022-7df99d9f80

Source: CCN
Type: IBM Security Bulletin 7008075 (Watson Speech Services Cartridge for Cloud Pak for Data)
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in WavPack ( CVE-2021-44269)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:wavpack:wavpack:5.4.0:*:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/o:fedoraproject:fedora:34:*:*:*:*:*:*:*
  • OR cpe:/o:fedoraproject:fedora:35:*:*:*:*:*:*:*
  • OR cpe:/o:fedoraproject:fedora:36:*:*:*:*:*:*:*

    • Configuration RedHat 1:
  • cpe:/a:redhat:enterprise_linux:8:*:*:*:*:*:*:*

    • Configuration RedHat 2:
  • cpe:/a:redhat:enterprise_linux:8::appstream:*:*:*:*:*

    • Configuration RedHat 3:
  • cpe:/a:redhat:enterprise_linux:8::crb:*:*:*:*:*

    • Configuration RedHat 4:
  • cpe:/a:redhat:enterprise_linux:9:*:*:*:*:*:*:*

    • Configuration RedHat 5:
  • cpe:/a:redhat:enterprise_linux:9::appstream:*:*:*:*:*

    • Configuration RedHat 6:
  • cpe:/a:redhat:enterprise_linux:9::crb:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:wavpack:wavpack:5.4.0:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:7696
    P
    		libwavpack1-5.4.0-150000.4.15.1 on GA media (Moderate)
    2023-06-12
    oval:org.opensuse.security:def:7982
    P
    		wavpack-5.4.0-150000.4.15.1 on GA media (Moderate)
    2023-06-12
    oval:com.redhat.rhsa:def:20228139
    P
    		RHSA-2022:8139: wavpack security update (Low)
    2022-11-15
    oval:com.redhat.rhsa:def:20227558
    P
    		RHSA-2022:7558: wavpack security update (Low)
    2022-11-08
    oval:org.opensuse.security:def:3104
    P
    		hyper-v-7-7.5 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3359
    P
    		ruby-2.1-1.4 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:94989
    P
    		wavpack-5.4.0-4.12.1 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:94734
    P
    		libwavpack1-5.4.0-4.12.1 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:101676
    P
    		Security update for wavpack (Moderate)
    2022-03-28
    oval:org.opensuse.security:def:119158
    P
    		Security update for wavpack (Moderate)
    2022-03-28
    oval:org.opensuse.security:def:101773
    P
    		Security update for wavpack (Moderate)
    2022-03-28
    oval:org.opensuse.security:def:984
    P
    		Security update for wavpack (Moderate)
    2022-03-28
    oval:org.opensuse.security:def:1095
    P
    		Security update for wavpack (Moderate)
    2022-03-28
    BACK
    wavpack wavpack 5.4.0
    fedoraproject fedora 34
    fedoraproject fedora 35
    fedoraproject fedora 36
    wavpack wavpack 5.4.0