CVE-2017-17554 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-17554 Interim 1 12 2025-04-22T23:42:25Z current 2021-05-30T14:04:49Z 2025-04-22T23:42:25Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-17554 A NULL pointer dereference (DoS) Vulnerability was found in the function aubio_source_avcodec_readframe in io/source_avcodec.c of aubio 0.4.6, which may lead to DoS when playing a crafted audio file. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Y5KZRPN3WJLADSZ7QVABOGL5DUR5NJKX/#Y5KZRPN3WJLADSZ7QVABOGL5DUR5NJKX E-Mail link for openSUSE-SU-2018:1733-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/63BI5A43FE7RHSZ6ZDEJYUUIUUQIDY5M/#63BI5A43FE7RHSZ6ZDEJYUUIUUQIDY5M E-Mail link for openSUSE-SU-2018:1734-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings openSUSE Leap 15.0 openSUSE Tumbleweed aubio-tools-0.4.6-lp150.3.3.1 aubio-tools-0.4.9-5.3 libaubio-devel-0.4.6-lp150.3.3.1 libaubio-devel-0.4.9-5.3 libaubio5-0.4.6-lp150.3.3.1 libaubio5-0.4.9-5.3 libaubio5-32bit-0.4.6-lp150.3.3.1 libaubio5-32bit-0.4.9-5.3 python2-aubio-0.4.6-lp150.3.3.1 python3-aubio-0.4.6-lp150.3.3.1 aubio-tools-0.4.6-lp150.3.3.1 as a component of openSUSE Leap 15.0 libaubio-devel-0.4.6-lp150.3.3.1 as a component of openSUSE Leap 15.0 libaubio5-0.4.6-lp150.3.3.1 as a component of openSUSE Leap 15.0 libaubio5-32bit-0.4.6-lp150.3.3.1 as a component of openSUSE Leap 15.0 python2-aubio-0.4.6-lp150.3.3.1 as a component of openSUSE Leap 15.0 python3-aubio-0.4.6-lp150.3.3.1 as a component of openSUSE Leap 15.0 aubio-tools-0.4.9-5.3 as a component of openSUSE Tumbleweed libaubio-devel-0.4.9-5.3 as a component of openSUSE Tumbleweed libaubio5-0.4.9-5.3 as a component of openSUSE Tumbleweed libaubio5-32bit-0.4.9-5.3 as a component of openSUSE Tumbleweed A NULL pointer dereference (DoS) Vulnerability was found in the function aubio_source_avcodec_readframe in io/source_avcodec.c of aubio 0.4.6, which may lead to DoS when playing a crafted audio file. CVE-2017-17554 openSUSE Leap 15.0:aubio-tools-0.4.6-lp150.3.3.1 openSUSE Leap 15.0:libaubio-devel-0.4.6-lp150.3.3.1 openSUSE Leap 15.0:libaubio5-0.4.6-lp150.3.3.1 openSUSE Leap 15.0:libaubio5-32bit-0.4.6-lp150.3.3.1 openSUSE Leap 15.0:python2-aubio-0.4.6-lp150.3.3.1 openSUSE Leap 15.0:python3-aubio-0.4.6-lp150.3.3.1 openSUSE Tumbleweed:aubio-tools-0.4.9-5.3 openSUSE Tumbleweed:libaubio-devel-0.4.9-5.3 openSUSE Tumbleweed:libaubio5-0.4.9-5.3 openSUSE Tumbleweed:libaubio5-32bit-0.4.9-5.3 important 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H