Your submission was sent successfully! Close

CVE-2017-11546

Published: 31 July 2017

The insert_note_steps function in readmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mid file. NOTE: a crash might be relevant when using the --background option.

Priority

Medium

CVSS 3 base score: 5.5

Status

Package Release Status
timidity
Launchpad, Ubuntu, Debian
artful Ignored
(reached end-of-life)
bionic Needed

cosmic Not vulnerable
(2.14.0-8)
disco Not vulnerable
(2.14.0-8)
eoan Not vulnerable
(2.14.0-8)
focal Not vulnerable
(2.14.0-8)
groovy Not vulnerable
(2.14.0-8)
hirsute Not vulnerable
(2.14.0-8)
impish Not vulnerable
(2.14.0-8)
jammy Not vulnerable
(2.14.0-8)
precise Does not exist

trusty Does not exist
(trusty was needed)
upstream
Released (commit aa05396a01d05, 2.14.0-4)
xenial Ignored
(end of standard support, was needed)
zesty Ignored
(reached end-of-life)
Patches:
upstream: https://sourceforge.net/p/timidity/git/ci/aa05396a01d05a5bc35dd2459f0599eacf0c4f7b/tree/