Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2019-1010223 (GCVE-0-2019-1010223)
Vulnerability from cvelistv5
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19800. Reason: This candidate is a reservation duplicate of CVE-2018-19800. Notes: All CVE users should reference CVE-2018-19800 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
Show details on NVD website{
"containers": {
"cna": {
"providerMetadata": {
"dateUpdated": "2019-07-26T12:44:18",
"orgId": "7556d962-6fb7-411e-85fa-6cd62f095ba8",
"shortName": "dwf"
},
"rejectedReasons": [
{
"lang": "en",
"value": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19800. Reason: This candidate is a reservation duplicate of CVE-2018-19800. Notes: All CVE users should reference CVE-2018-19800 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "7556d962-6fb7-411e-85fa-6cd62f095ba8",
"assignerShortName": "dwf",
"cveId": "CVE-2019-1010223",
"datePublished": "2019-07-22T17:12:35",
"dateRejected": "2019-07-26T12:44:18",
"dateReserved": "2019-03-20T00:00:00",
"dateUpdated": "2019-07-26T12:44:18",
"state": "REJECTED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.0",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2019-1010223\",\"sourceIdentifier\":\"josh@bress.net\",\"published\":\"2019-07-22T18:15:11.197\",\"lastModified\":\"2023-11-07T03:02:17.953\",\"vulnStatus\":\"Rejected\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19800. Reason: This candidate is a reservation duplicate of CVE-2018-19800. Notes: All CVE users should reference CVE-2018-19800 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage\"}],\"metrics\":{},\"references\":[]}}"
}
}
opensuse-su-2020:0121-1
Vulnerability from csaf_opensuse
Published
2020-01-28 13:12
Modified
2020-01-28 13:12
Summary
Security update for sarg
Notes
Title of the patch
Security update for sarg
Description of the patch
This update for aubio fixes the following issues:
- CVE-2019-1010224: Fixed a denial of service caused by null pointer dereference (boo#1142435).
Patchnames
openSUSE-2020-121
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for sarg",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for aubio fixes the following issues:\n\n- CVE-2019-1010224: Fixed a denial of service caused by null pointer dereference (boo#1142435).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2020-121",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_0121-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2020:0121-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WWCI7AOYKPNQAPUPZHHRTI5DVAGJOXRU/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2020:0121-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WWCI7AOYKPNQAPUPZHHRTI5DVAGJOXRU/"
},
{
"category": "self",
"summary": "SUSE Bug 1142433",
"url": "https://bugzilla.suse.com/1142433"
},
{
"category": "self",
"summary": "SUSE Bug 1142435",
"url": "https://bugzilla.suse.com/1142435"
},
{
"category": "self",
"summary": "SUSE Bug 1142436",
"url": "https://bugzilla.suse.com/1142436"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-1010222 page",
"url": "https://www.suse.com/security/cve/CVE-2019-1010222/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-1010223 page",
"url": "https://www.suse.com/security/cve/CVE-2019-1010223/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-1010224 page",
"url": "https://www.suse.com/security/cve/CVE-2019-1010224/"
}
],
"title": "Security update for sarg",
"tracking": {
"current_release_date": "2020-01-28T13:12:30Z",
"generator": {
"date": "2020-01-28T13:12:30Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2020:0121-1",
"initial_release_date": "2020-01-28T13:12:30Z",
"revision_history": [
{
"date": "2020-01-28T13:12:30Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "aubio-tools-0.4.6-lp151.6.7.1.i586",
"product": {
"name": "aubio-tools-0.4.6-lp151.6.7.1.i586",
"product_id": "aubio-tools-0.4.6-lp151.6.7.1.i586"
}
},
{
"category": "product_version",
"name": "libaubio-devel-0.4.6-lp151.6.7.1.i586",
"product": {
"name": "libaubio-devel-0.4.6-lp151.6.7.1.i586",
"product_id": "libaubio-devel-0.4.6-lp151.6.7.1.i586"
}
},
{
"category": "product_version",
"name": "libaubio5-0.4.6-lp151.6.7.1.i586",
"product": {
"name": "libaubio5-0.4.6-lp151.6.7.1.i586",
"product_id": "libaubio5-0.4.6-lp151.6.7.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "aubio-tools-0.4.6-lp151.6.7.1.x86_64",
"product": {
"name": "aubio-tools-0.4.6-lp151.6.7.1.x86_64",
"product_id": "aubio-tools-0.4.6-lp151.6.7.1.x86_64"
}
},
{
"category": "product_version",
"name": "libaubio-devel-0.4.6-lp151.6.7.1.x86_64",
"product": {
"name": "libaubio-devel-0.4.6-lp151.6.7.1.x86_64",
"product_id": "libaubio-devel-0.4.6-lp151.6.7.1.x86_64"
}
},
{
"category": "product_version",
"name": "libaubio5-0.4.6-lp151.6.7.1.x86_64",
"product": {
"name": "libaubio5-0.4.6-lp151.6.7.1.x86_64",
"product_id": "libaubio5-0.4.6-lp151.6.7.1.x86_64"
}
},
{
"category": "product_version",
"name": "libaubio5-32bit-0.4.6-lp151.6.7.1.x86_64",
"product": {
"name": "libaubio5-32bit-0.4.6-lp151.6.7.1.x86_64",
"product_id": "libaubio5-32bit-0.4.6-lp151.6.7.1.x86_64"
}
},
{
"category": "product_version",
"name": "python2-aubio-0.4.6-lp151.6.7.1.x86_64",
"product": {
"name": "python2-aubio-0.4.6-lp151.6.7.1.x86_64",
"product_id": "python2-aubio-0.4.6-lp151.6.7.1.x86_64"
}
},
{
"category": "product_version",
"name": "python3-aubio-0.4.6-lp151.6.7.1.x86_64",
"product": {
"name": "python3-aubio-0.4.6-lp151.6.7.1.x86_64",
"product_id": "python3-aubio-0.4.6-lp151.6.7.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.1",
"product": {
"name": "openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "aubio-tools-0.4.6-lp151.6.7.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:aubio-tools-0.4.6-lp151.6.7.1.i586"
},
"product_reference": "aubio-tools-0.4.6-lp151.6.7.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aubio-tools-0.4.6-lp151.6.7.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:aubio-tools-0.4.6-lp151.6.7.1.x86_64"
},
"product_reference": "aubio-tools-0.4.6-lp151.6.7.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libaubio-devel-0.4.6-lp151.6.7.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libaubio-devel-0.4.6-lp151.6.7.1.i586"
},
"product_reference": "libaubio-devel-0.4.6-lp151.6.7.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libaubio-devel-0.4.6-lp151.6.7.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libaubio-devel-0.4.6-lp151.6.7.1.x86_64"
},
"product_reference": "libaubio-devel-0.4.6-lp151.6.7.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libaubio5-0.4.6-lp151.6.7.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libaubio5-0.4.6-lp151.6.7.1.i586"
},
"product_reference": "libaubio5-0.4.6-lp151.6.7.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libaubio5-0.4.6-lp151.6.7.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libaubio5-0.4.6-lp151.6.7.1.x86_64"
},
"product_reference": "libaubio5-0.4.6-lp151.6.7.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libaubio5-32bit-0.4.6-lp151.6.7.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libaubio5-32bit-0.4.6-lp151.6.7.1.x86_64"
},
"product_reference": "libaubio5-32bit-0.4.6-lp151.6.7.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-aubio-0.4.6-lp151.6.7.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:python2-aubio-0.4.6-lp151.6.7.1.x86_64"
},
"product_reference": "python2-aubio-0.4.6-lp151.6.7.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-aubio-0.4.6-lp151.6.7.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:python3-aubio-0.4.6-lp151.6.7.1.x86_64"
},
"product_reference": "python3-aubio-0.4.6-lp151.6.7.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-1010222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-1010222"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19801. Reason: This candidate is a reservation duplicate of CVE-2018-19801. Notes: All CVE users should reference CVE-2018-19801 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:aubio-tools-0.4.6-lp151.6.7.1.i586",
"openSUSE Leap 15.1:aubio-tools-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:libaubio-devel-0.4.6-lp151.6.7.1.i586",
"openSUSE Leap 15.1:libaubio-devel-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:libaubio5-0.4.6-lp151.6.7.1.i586",
"openSUSE Leap 15.1:libaubio5-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:libaubio5-32bit-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:python2-aubio-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:python3-aubio-0.4.6-lp151.6.7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-1010222",
"url": "https://www.suse.com/security/cve/CVE-2019-1010222"
},
{
"category": "external",
"summary": "SUSE Bug 1142433 for CVE-2019-1010222",
"url": "https://bugzilla.suse.com/1142433"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:aubio-tools-0.4.6-lp151.6.7.1.i586",
"openSUSE Leap 15.1:aubio-tools-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:libaubio-devel-0.4.6-lp151.6.7.1.i586",
"openSUSE Leap 15.1:libaubio-devel-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:libaubio5-0.4.6-lp151.6.7.1.i586",
"openSUSE Leap 15.1:libaubio5-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:libaubio5-32bit-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:python2-aubio-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:python3-aubio-0.4.6-lp151.6.7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-28T13:12:30Z",
"details": "moderate"
}
],
"title": "CVE-2019-1010222"
},
{
"cve": "CVE-2019-1010223",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-1010223"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19800. Reason: This candidate is a reservation duplicate of CVE-2018-19800. Notes: All CVE users should reference CVE-2018-19800 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:aubio-tools-0.4.6-lp151.6.7.1.i586",
"openSUSE Leap 15.1:aubio-tools-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:libaubio-devel-0.4.6-lp151.6.7.1.i586",
"openSUSE Leap 15.1:libaubio-devel-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:libaubio5-0.4.6-lp151.6.7.1.i586",
"openSUSE Leap 15.1:libaubio5-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:libaubio5-32bit-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:python2-aubio-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:python3-aubio-0.4.6-lp151.6.7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-1010223",
"url": "https://www.suse.com/security/cve/CVE-2019-1010223"
},
{
"category": "external",
"summary": "SUSE Bug 1142436 for CVE-2019-1010223",
"url": "https://bugzilla.suse.com/1142436"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:aubio-tools-0.4.6-lp151.6.7.1.i586",
"openSUSE Leap 15.1:aubio-tools-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:libaubio-devel-0.4.6-lp151.6.7.1.i586",
"openSUSE Leap 15.1:libaubio-devel-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:libaubio5-0.4.6-lp151.6.7.1.i586",
"openSUSE Leap 15.1:libaubio5-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:libaubio5-32bit-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:python2-aubio-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:python3-aubio-0.4.6-lp151.6.7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Leap 15.1:aubio-tools-0.4.6-lp151.6.7.1.i586",
"openSUSE Leap 15.1:aubio-tools-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:libaubio-devel-0.4.6-lp151.6.7.1.i586",
"openSUSE Leap 15.1:libaubio-devel-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:libaubio5-0.4.6-lp151.6.7.1.i586",
"openSUSE Leap 15.1:libaubio5-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:libaubio5-32bit-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:python2-aubio-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:python3-aubio-0.4.6-lp151.6.7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-28T13:12:30Z",
"details": "moderate"
}
],
"title": "CVE-2019-1010223"
},
{
"cve": "CVE-2019-1010224",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-1010224"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19802. Reason: This candidate is a reservation duplicate of CVE-2018-19802. Notes: All CVE users should reference CVE-2018-19802 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:aubio-tools-0.4.6-lp151.6.7.1.i586",
"openSUSE Leap 15.1:aubio-tools-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:libaubio-devel-0.4.6-lp151.6.7.1.i586",
"openSUSE Leap 15.1:libaubio-devel-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:libaubio5-0.4.6-lp151.6.7.1.i586",
"openSUSE Leap 15.1:libaubio5-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:libaubio5-32bit-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:python2-aubio-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:python3-aubio-0.4.6-lp151.6.7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-1010224",
"url": "https://www.suse.com/security/cve/CVE-2019-1010224"
},
{
"category": "external",
"summary": "SUSE Bug 1142435 for CVE-2019-1010224",
"url": "https://bugzilla.suse.com/1142435"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:aubio-tools-0.4.6-lp151.6.7.1.i586",
"openSUSE Leap 15.1:aubio-tools-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:libaubio-devel-0.4.6-lp151.6.7.1.i586",
"openSUSE Leap 15.1:libaubio-devel-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:libaubio5-0.4.6-lp151.6.7.1.i586",
"openSUSE Leap 15.1:libaubio5-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:libaubio5-32bit-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:python2-aubio-0.4.6-lp151.6.7.1.x86_64",
"openSUSE Leap 15.1:python3-aubio-0.4.6-lp151.6.7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-28T13:12:30Z",
"details": "moderate"
}
],
"title": "CVE-2019-1010224"
}
]
}
opensuse-su-2019:1852-1
Vulnerability from csaf_opensuse
Published
2019-08-13 09:12
Modified
2019-08-13 09:12
Summary
Security update for aubio
Notes
Title of the patch
Security update for aubio
Description of the patch
This update for aubio fixes the following issues:
- CVE-2019-1010224: Fixed a denial of service (boo#1142435).
This update was imported from the openSUSE:Leap:15.0:Update update project.
Patchnames
openSUSE-2019-1852
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for aubio",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for aubio fixes the following issues:\n\n- CVE-2019-1010224: Fixed a denial of service (boo#1142435).\n\nThis update was imported from the openSUSE:Leap:15.0:Update update project.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2019-1852",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_1852-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2019:1852-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F7IYIK6EBHH3PEKDL4HFZGZP4AI32AG3/#F7IYIK6EBHH3PEKDL4HFZGZP4AI32AG3"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2019:1852-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F7IYIK6EBHH3PEKDL4HFZGZP4AI32AG3/#F7IYIK6EBHH3PEKDL4HFZGZP4AI32AG3"
},
{
"category": "self",
"summary": "SUSE Bug 1137823",
"url": "https://bugzilla.suse.com/1137823"
},
{
"category": "self",
"summary": "SUSE Bug 1142433",
"url": "https://bugzilla.suse.com/1142433"
},
{
"category": "self",
"summary": "SUSE Bug 1142435",
"url": "https://bugzilla.suse.com/1142435"
},
{
"category": "self",
"summary": "SUSE Bug 1142436",
"url": "https://bugzilla.suse.com/1142436"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-19802 page",
"url": "https://www.suse.com/security/cve/CVE-2018-19802/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-1010222 page",
"url": "https://www.suse.com/security/cve/CVE-2019-1010222/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-1010223 page",
"url": "https://www.suse.com/security/cve/CVE-2019-1010223/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-1010224 page",
"url": "https://www.suse.com/security/cve/CVE-2019-1010224/"
}
],
"title": "Security update for aubio",
"tracking": {
"current_release_date": "2019-08-13T09:12:34Z",
"generator": {
"date": "2019-08-13T09:12:34Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2019:1852-1",
"initial_release_date": "2019-08-13T09:12:34Z",
"revision_history": [
{
"date": "2019-08-13T09:12:34Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "python2-aubio-0.4.6-bp150.3.15.1.aarch64",
"product": {
"name": "python2-aubio-0.4.6-bp150.3.15.1.aarch64",
"product_id": "python2-aubio-0.4.6-bp150.3.15.1.aarch64"
}
},
{
"category": "product_version",
"name": "python3-aubio-0.4.6-bp150.3.15.1.aarch64",
"product": {
"name": "python3-aubio-0.4.6-bp150.3.15.1.aarch64",
"product_id": "python3-aubio-0.4.6-bp150.3.15.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "python2-aubio-0.4.6-bp150.3.15.1.ppc64le",
"product": {
"name": "python2-aubio-0.4.6-bp150.3.15.1.ppc64le",
"product_id": "python2-aubio-0.4.6-bp150.3.15.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python3-aubio-0.4.6-bp150.3.15.1.ppc64le",
"product": {
"name": "python3-aubio-0.4.6-bp150.3.15.1.ppc64le",
"product_id": "python3-aubio-0.4.6-bp150.3.15.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "python2-aubio-0.4.6-bp150.3.15.1.s390x",
"product": {
"name": "python2-aubio-0.4.6-bp150.3.15.1.s390x",
"product_id": "python2-aubio-0.4.6-bp150.3.15.1.s390x"
}
},
{
"category": "product_version",
"name": "python3-aubio-0.4.6-bp150.3.15.1.s390x",
"product": {
"name": "python3-aubio-0.4.6-bp150.3.15.1.s390x",
"product_id": "python3-aubio-0.4.6-bp150.3.15.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "aubio-tools-0.4.6-bp150.3.15.1.x86_64",
"product": {
"name": "aubio-tools-0.4.6-bp150.3.15.1.x86_64",
"product_id": "aubio-tools-0.4.6-bp150.3.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "libaubio-devel-0.4.6-bp150.3.15.1.x86_64",
"product": {
"name": "libaubio-devel-0.4.6-bp150.3.15.1.x86_64",
"product_id": "libaubio-devel-0.4.6-bp150.3.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "libaubio5-0.4.6-bp150.3.15.1.x86_64",
"product": {
"name": "libaubio5-0.4.6-bp150.3.15.1.x86_64",
"product_id": "libaubio5-0.4.6-bp150.3.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "python2-aubio-0.4.6-bp150.3.15.1.x86_64",
"product": {
"name": "python2-aubio-0.4.6-bp150.3.15.1.x86_64",
"product_id": "python2-aubio-0.4.6-bp150.3.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "python3-aubio-0.4.6-bp150.3.15.1.x86_64",
"product": {
"name": "python3-aubio-0.4.6-bp150.3.15.1.x86_64",
"product_id": "python3-aubio-0.4.6-bp150.3.15.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Package Hub 15",
"product": {
"name": "SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "aubio-tools-0.4.6-bp150.3.15.1.x86_64 as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:aubio-tools-0.4.6-bp150.3.15.1.x86_64"
},
"product_reference": "aubio-tools-0.4.6-bp150.3.15.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libaubio-devel-0.4.6-bp150.3.15.1.x86_64 as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:libaubio-devel-0.4.6-bp150.3.15.1.x86_64"
},
"product_reference": "libaubio-devel-0.4.6-bp150.3.15.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libaubio5-0.4.6-bp150.3.15.1.x86_64 as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:libaubio5-0.4.6-bp150.3.15.1.x86_64"
},
"product_reference": "libaubio5-0.4.6-bp150.3.15.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-aubio-0.4.6-bp150.3.15.1.aarch64 as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.aarch64"
},
"product_reference": "python2-aubio-0.4.6-bp150.3.15.1.aarch64",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-aubio-0.4.6-bp150.3.15.1.ppc64le as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.ppc64le"
},
"product_reference": "python2-aubio-0.4.6-bp150.3.15.1.ppc64le",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-aubio-0.4.6-bp150.3.15.1.s390x as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.s390x"
},
"product_reference": "python2-aubio-0.4.6-bp150.3.15.1.s390x",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-aubio-0.4.6-bp150.3.15.1.x86_64 as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.x86_64"
},
"product_reference": "python2-aubio-0.4.6-bp150.3.15.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-aubio-0.4.6-bp150.3.15.1.aarch64 as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.aarch64"
},
"product_reference": "python3-aubio-0.4.6-bp150.3.15.1.aarch64",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-aubio-0.4.6-bp150.3.15.1.ppc64le as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.ppc64le"
},
"product_reference": "python3-aubio-0.4.6-bp150.3.15.1.ppc64le",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-aubio-0.4.6-bp150.3.15.1.s390x as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.s390x"
},
"product_reference": "python3-aubio-0.4.6-bp150.3.15.1.s390x",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-aubio-0.4.6-bp150.3.15.1.x86_64 as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.x86_64"
},
"product_reference": "python3-aubio-0.4.6-bp150.3.15.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-19802",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-19802"
}
],
"notes": [
{
"category": "general",
"text": "aubio v0.4.0 to v0.4.8 has a new_aubio_onset NULL pointer dereference.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15:aubio-tools-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:libaubio-devel-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:libaubio5-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.aarch64",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.ppc64le",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.s390x",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.aarch64",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.ppc64le",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.s390x",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-19802",
"url": "https://www.suse.com/security/cve/CVE-2018-19802"
},
{
"category": "external",
"summary": "SUSE Bug 1137823 for CVE-2018-19802",
"url": "https://bugzilla.suse.com/1137823"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15:aubio-tools-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:libaubio-devel-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:libaubio5-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.aarch64",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.ppc64le",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.s390x",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.aarch64",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.ppc64le",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.s390x",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Package Hub 15:aubio-tools-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:libaubio-devel-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:libaubio5-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.aarch64",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.ppc64le",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.s390x",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.aarch64",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.ppc64le",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.s390x",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-13T09:12:34Z",
"details": "moderate"
}
],
"title": "CVE-2018-19802"
},
{
"cve": "CVE-2019-1010222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-1010222"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19801. Reason: This candidate is a reservation duplicate of CVE-2018-19801. Notes: All CVE users should reference CVE-2018-19801 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15:aubio-tools-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:libaubio-devel-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:libaubio5-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.aarch64",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.ppc64le",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.s390x",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.aarch64",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.ppc64le",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.s390x",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-1010222",
"url": "https://www.suse.com/security/cve/CVE-2019-1010222"
},
{
"category": "external",
"summary": "SUSE Bug 1142433 for CVE-2019-1010222",
"url": "https://bugzilla.suse.com/1142433"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15:aubio-tools-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:libaubio-devel-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:libaubio5-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.aarch64",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.ppc64le",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.s390x",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.aarch64",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.ppc64le",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.s390x",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-13T09:12:34Z",
"details": "moderate"
}
],
"title": "CVE-2019-1010222"
},
{
"cve": "CVE-2019-1010223",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-1010223"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19800. Reason: This candidate is a reservation duplicate of CVE-2018-19800. Notes: All CVE users should reference CVE-2018-19800 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15:aubio-tools-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:libaubio-devel-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:libaubio5-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.aarch64",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.ppc64le",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.s390x",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.aarch64",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.ppc64le",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.s390x",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-1010223",
"url": "https://www.suse.com/security/cve/CVE-2019-1010223"
},
{
"category": "external",
"summary": "SUSE Bug 1142436 for CVE-2019-1010223",
"url": "https://bugzilla.suse.com/1142436"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15:aubio-tools-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:libaubio-devel-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:libaubio5-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.aarch64",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.ppc64le",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.s390x",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.aarch64",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.ppc64le",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.s390x",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Package Hub 15:aubio-tools-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:libaubio-devel-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:libaubio5-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.aarch64",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.ppc64le",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.s390x",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.aarch64",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.ppc64le",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.s390x",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-13T09:12:34Z",
"details": "moderate"
}
],
"title": "CVE-2019-1010223"
},
{
"cve": "CVE-2019-1010224",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-1010224"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19802. Reason: This candidate is a reservation duplicate of CVE-2018-19802. Notes: All CVE users should reference CVE-2018-19802 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15:aubio-tools-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:libaubio-devel-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:libaubio5-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.aarch64",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.ppc64le",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.s390x",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.aarch64",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.ppc64le",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.s390x",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-1010224",
"url": "https://www.suse.com/security/cve/CVE-2019-1010224"
},
{
"category": "external",
"summary": "SUSE Bug 1142435 for CVE-2019-1010224",
"url": "https://bugzilla.suse.com/1142435"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15:aubio-tools-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:libaubio-devel-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:libaubio5-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.aarch64",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.ppc64le",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.s390x",
"SUSE Package Hub 15:python2-aubio-0.4.6-bp150.3.15.1.x86_64",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.aarch64",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.ppc64le",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.s390x",
"SUSE Package Hub 15:python3-aubio-0.4.6-bp150.3.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-13T09:12:34Z",
"details": "moderate"
}
],
"title": "CVE-2019-1010224"
}
]
}
opensuse-su-2019:1834-1
Vulnerability from csaf_opensuse
Published
2019-08-06 15:50
Modified
2019-08-06 15:50
Summary
Security update for aubio
Notes
Title of the patch
Security update for aubio
Description of the patch
This update for aubio fixes the following issues:
- CVE-2019-1010224: Fixed a denial of service (boo#1142435).
Patchnames
openSUSE-2019-1834
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for aubio",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for aubio fixes the following issues:\n\n- CVE-2019-1010224: Fixed a denial of service (boo#1142435).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2019-1834",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_1834-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2019:1834-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Q3RPP4NP7OEWEVETALD7WIXLE6LWTSCL/#Q3RPP4NP7OEWEVETALD7WIXLE6LWTSCL"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2019:1834-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Q3RPP4NP7OEWEVETALD7WIXLE6LWTSCL/#Q3RPP4NP7OEWEVETALD7WIXLE6LWTSCL"
},
{
"category": "self",
"summary": "SUSE Bug 1137823",
"url": "https://bugzilla.suse.com/1137823"
},
{
"category": "self",
"summary": "SUSE Bug 1142433",
"url": "https://bugzilla.suse.com/1142433"
},
{
"category": "self",
"summary": "SUSE Bug 1142435",
"url": "https://bugzilla.suse.com/1142435"
},
{
"category": "self",
"summary": "SUSE Bug 1142436",
"url": "https://bugzilla.suse.com/1142436"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-19802 page",
"url": "https://www.suse.com/security/cve/CVE-2018-19802/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-1010222 page",
"url": "https://www.suse.com/security/cve/CVE-2019-1010222/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-1010223 page",
"url": "https://www.suse.com/security/cve/CVE-2019-1010223/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-1010224 page",
"url": "https://www.suse.com/security/cve/CVE-2019-1010224/"
}
],
"title": "Security update for aubio",
"tracking": {
"current_release_date": "2019-08-06T15:50:27Z",
"generator": {
"date": "2019-08-06T15:50:27Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2019:1834-1",
"initial_release_date": "2019-08-06T15:50:27Z",
"revision_history": [
{
"date": "2019-08-06T15:50:27Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "aubio-tools-0.4.6-lp150.3.13.1.i586",
"product": {
"name": "aubio-tools-0.4.6-lp150.3.13.1.i586",
"product_id": "aubio-tools-0.4.6-lp150.3.13.1.i586"
}
},
{
"category": "product_version",
"name": "libaubio-devel-0.4.6-lp150.3.13.1.i586",
"product": {
"name": "libaubio-devel-0.4.6-lp150.3.13.1.i586",
"product_id": "libaubio-devel-0.4.6-lp150.3.13.1.i586"
}
},
{
"category": "product_version",
"name": "libaubio5-0.4.6-lp150.3.13.1.i586",
"product": {
"name": "libaubio5-0.4.6-lp150.3.13.1.i586",
"product_id": "libaubio5-0.4.6-lp150.3.13.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "aubio-tools-0.4.6-lp150.3.13.1.x86_64",
"product": {
"name": "aubio-tools-0.4.6-lp150.3.13.1.x86_64",
"product_id": "aubio-tools-0.4.6-lp150.3.13.1.x86_64"
}
},
{
"category": "product_version",
"name": "libaubio-devel-0.4.6-lp150.3.13.1.x86_64",
"product": {
"name": "libaubio-devel-0.4.6-lp150.3.13.1.x86_64",
"product_id": "libaubio-devel-0.4.6-lp150.3.13.1.x86_64"
}
},
{
"category": "product_version",
"name": "libaubio5-0.4.6-lp150.3.13.1.x86_64",
"product": {
"name": "libaubio5-0.4.6-lp150.3.13.1.x86_64",
"product_id": "libaubio5-0.4.6-lp150.3.13.1.x86_64"
}
},
{
"category": "product_version",
"name": "libaubio5-32bit-0.4.6-lp150.3.13.1.x86_64",
"product": {
"name": "libaubio5-32bit-0.4.6-lp150.3.13.1.x86_64",
"product_id": "libaubio5-32bit-0.4.6-lp150.3.13.1.x86_64"
}
},
{
"category": "product_version",
"name": "python2-aubio-0.4.6-lp150.3.13.1.x86_64",
"product": {
"name": "python2-aubio-0.4.6-lp150.3.13.1.x86_64",
"product_id": "python2-aubio-0.4.6-lp150.3.13.1.x86_64"
}
},
{
"category": "product_version",
"name": "python3-aubio-0.4.6-lp150.3.13.1.x86_64",
"product": {
"name": "python3-aubio-0.4.6-lp150.3.13.1.x86_64",
"product_id": "python3-aubio-0.4.6-lp150.3.13.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.0",
"product": {
"name": "openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.0"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "aubio-tools-0.4.6-lp150.3.13.1.i586 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:aubio-tools-0.4.6-lp150.3.13.1.i586"
},
"product_reference": "aubio-tools-0.4.6-lp150.3.13.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aubio-tools-0.4.6-lp150.3.13.1.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:aubio-tools-0.4.6-lp150.3.13.1.x86_64"
},
"product_reference": "aubio-tools-0.4.6-lp150.3.13.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libaubio-devel-0.4.6-lp150.3.13.1.i586 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:libaubio-devel-0.4.6-lp150.3.13.1.i586"
},
"product_reference": "libaubio-devel-0.4.6-lp150.3.13.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libaubio-devel-0.4.6-lp150.3.13.1.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:libaubio-devel-0.4.6-lp150.3.13.1.x86_64"
},
"product_reference": "libaubio-devel-0.4.6-lp150.3.13.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libaubio5-0.4.6-lp150.3.13.1.i586 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:libaubio5-0.4.6-lp150.3.13.1.i586"
},
"product_reference": "libaubio5-0.4.6-lp150.3.13.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libaubio5-0.4.6-lp150.3.13.1.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:libaubio5-0.4.6-lp150.3.13.1.x86_64"
},
"product_reference": "libaubio5-0.4.6-lp150.3.13.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libaubio5-32bit-0.4.6-lp150.3.13.1.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:libaubio5-32bit-0.4.6-lp150.3.13.1.x86_64"
},
"product_reference": "libaubio5-32bit-0.4.6-lp150.3.13.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-aubio-0.4.6-lp150.3.13.1.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:python2-aubio-0.4.6-lp150.3.13.1.x86_64"
},
"product_reference": "python2-aubio-0.4.6-lp150.3.13.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-aubio-0.4.6-lp150.3.13.1.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:python3-aubio-0.4.6-lp150.3.13.1.x86_64"
},
"product_reference": "python3-aubio-0.4.6-lp150.3.13.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-19802",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-19802"
}
],
"notes": [
{
"category": "general",
"text": "aubio v0.4.0 to v0.4.8 has a new_aubio_onset NULL pointer dereference.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:aubio-tools-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:aubio-tools-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio-devel-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:libaubio-devel-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio5-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:libaubio5-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio5-32bit-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:python2-aubio-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:python3-aubio-0.4.6-lp150.3.13.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-19802",
"url": "https://www.suse.com/security/cve/CVE-2018-19802"
},
{
"category": "external",
"summary": "SUSE Bug 1137823 for CVE-2018-19802",
"url": "https://bugzilla.suse.com/1137823"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:aubio-tools-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:aubio-tools-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio-devel-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:libaubio-devel-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio5-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:libaubio5-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio5-32bit-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:python2-aubio-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:python3-aubio-0.4.6-lp150.3.13.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Leap 15.0:aubio-tools-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:aubio-tools-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio-devel-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:libaubio-devel-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio5-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:libaubio5-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio5-32bit-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:python2-aubio-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:python3-aubio-0.4.6-lp150.3.13.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T15:50:27Z",
"details": "moderate"
}
],
"title": "CVE-2018-19802"
},
{
"cve": "CVE-2019-1010222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-1010222"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19801. Reason: This candidate is a reservation duplicate of CVE-2018-19801. Notes: All CVE users should reference CVE-2018-19801 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:aubio-tools-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:aubio-tools-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio-devel-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:libaubio-devel-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio5-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:libaubio5-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio5-32bit-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:python2-aubio-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:python3-aubio-0.4.6-lp150.3.13.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-1010222",
"url": "https://www.suse.com/security/cve/CVE-2019-1010222"
},
{
"category": "external",
"summary": "SUSE Bug 1142433 for CVE-2019-1010222",
"url": "https://bugzilla.suse.com/1142433"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:aubio-tools-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:aubio-tools-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio-devel-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:libaubio-devel-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio5-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:libaubio5-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio5-32bit-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:python2-aubio-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:python3-aubio-0.4.6-lp150.3.13.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T15:50:27Z",
"details": "moderate"
}
],
"title": "CVE-2019-1010222"
},
{
"cve": "CVE-2019-1010223",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-1010223"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19800. Reason: This candidate is a reservation duplicate of CVE-2018-19800. Notes: All CVE users should reference CVE-2018-19800 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:aubio-tools-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:aubio-tools-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio-devel-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:libaubio-devel-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio5-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:libaubio5-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio5-32bit-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:python2-aubio-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:python3-aubio-0.4.6-lp150.3.13.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-1010223",
"url": "https://www.suse.com/security/cve/CVE-2019-1010223"
},
{
"category": "external",
"summary": "SUSE Bug 1142436 for CVE-2019-1010223",
"url": "https://bugzilla.suse.com/1142436"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:aubio-tools-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:aubio-tools-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio-devel-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:libaubio-devel-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio5-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:libaubio5-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio5-32bit-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:python2-aubio-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:python3-aubio-0.4.6-lp150.3.13.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Leap 15.0:aubio-tools-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:aubio-tools-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio-devel-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:libaubio-devel-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio5-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:libaubio5-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio5-32bit-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:python2-aubio-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:python3-aubio-0.4.6-lp150.3.13.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T15:50:27Z",
"details": "moderate"
}
],
"title": "CVE-2019-1010223"
},
{
"cve": "CVE-2019-1010224",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-1010224"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19802. Reason: This candidate is a reservation duplicate of CVE-2018-19802. Notes: All CVE users should reference CVE-2018-19802 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:aubio-tools-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:aubio-tools-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio-devel-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:libaubio-devel-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio5-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:libaubio5-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio5-32bit-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:python2-aubio-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:python3-aubio-0.4.6-lp150.3.13.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-1010224",
"url": "https://www.suse.com/security/cve/CVE-2019-1010224"
},
{
"category": "external",
"summary": "SUSE Bug 1142435 for CVE-2019-1010224",
"url": "https://bugzilla.suse.com/1142435"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:aubio-tools-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:aubio-tools-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio-devel-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:libaubio-devel-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio5-0.4.6-lp150.3.13.1.i586",
"openSUSE Leap 15.0:libaubio5-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:libaubio5-32bit-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:python2-aubio-0.4.6-lp150.3.13.1.x86_64",
"openSUSE Leap 15.0:python3-aubio-0.4.6-lp150.3.13.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-06T15:50:27Z",
"details": "moderate"
}
],
"title": "CVE-2019-1010224"
}
]
}
cnvd-2019-24005
Vulnerability from cnvd
Title
aubio缓冲区溢出漏洞
Description
aubio是一款用于从音频信号中提取注释的工具。该产品提供数字滤波器、相位声码器、音高跟踪和瞬态/稳态分离等功能。
aubio 0.4.8及之前版本中的tempo存在缓冲区溢出漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。
Severity
高
VLAI Severity ?
Patch Name
aubio缓冲区溢出漏洞的补丁
Patch Description
aubio是一款用于从音频信号中提取注释的工具。该产品提供数字滤波器、相位声码器、音高跟踪和瞬态/稳态分离等功能。
aubio 0.4.8及之前版本中的tempo存在缓冲区溢出漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description
目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://github.com/aubio/aubio/commit/b1559f4c9ce2b304d8d27ffdc7128b6795ca82e5
Reference
https://nvd.nist.gov/vuln/detail/CVE-2019-1010223
Impacted products
| Name | aubio aubio <=0.4.8 |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2019-1010223"
}
},
"description": "aubio\u662f\u4e00\u6b3e\u7528\u4e8e\u4ece\u97f3\u9891\u4fe1\u53f7\u4e2d\u63d0\u53d6\u6ce8\u91ca\u7684\u5de5\u5177\u3002\u8be5\u4ea7\u54c1\u63d0\u4f9b\u6570\u5b57\u6ee4\u6ce2\u5668\u3001\u76f8\u4f4d\u58f0\u7801\u5668\u3001\u97f3\u9ad8\u8ddf\u8e2a\u548c\u77ac\u6001/\u7a33\u6001\u5206\u79bb\u7b49\u529f\u80fd\u3002\n\naubio 0.4.8\u53ca\u4e4b\u524d\u7248\u672c\u4e2d\u7684tempo\u5b58\u5728\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7f51\u7edc\u7cfb\u7edf\u6216\u4ea7\u54c1\u5728\u5185\u5b58\u4e0a\u6267\u884c\u64cd\u4f5c\u65f6\uff0c\u672a\u6b63\u786e\u9a8c\u8bc1\u6570\u636e\u8fb9\u754c\uff0c\u5bfc\u81f4\u5411\u5173\u8054\u7684\u5176\u4ed6\u5185\u5b58\u4f4d\u7f6e\u4e0a\u6267\u884c\u4e86\u9519\u8bef\u7684\u8bfb\u5199\u64cd\u4f5c\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u7f13\u51b2\u533a\u6ea2\u51fa\u6216\u5806\u6ea2\u51fa\u7b49\u3002",
"discovererName": "unKnow",
"formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://github.com/aubio/aubio/commit/b1559f4c9ce2b304d8d27ffdc7128b6795ca82e5",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2019-24005",
"openTime": "2019-07-24",
"patchDescription": "aubio\u662f\u4e00\u6b3e\u7528\u4e8e\u4ece\u97f3\u9891\u4fe1\u53f7\u4e2d\u63d0\u53d6\u6ce8\u91ca\u7684\u5de5\u5177\u3002\u8be5\u4ea7\u54c1\u63d0\u4f9b\u6570\u5b57\u6ee4\u6ce2\u5668\u3001\u76f8\u4f4d\u58f0\u7801\u5668\u3001\u97f3\u9ad8\u8ddf\u8e2a\u548c\u77ac\u6001/\u7a33\u6001\u5206\u79bb\u7b49\u529f\u80fd\u3002\r\n\r\naubio 0.4.8\u53ca\u4e4b\u524d\u7248\u672c\u4e2d\u7684tempo\u5b58\u5728\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7f51\u7edc\u7cfb\u7edf\u6216\u4ea7\u54c1\u5728\u5185\u5b58\u4e0a\u6267\u884c\u64cd\u4f5c\u65f6\uff0c\u672a\u6b63\u786e\u9a8c\u8bc1\u6570\u636e\u8fb9\u754c\uff0c\u5bfc\u81f4\u5411\u5173\u8054\u7684\u5176\u4ed6\u5185\u5b58\u4f4d\u7f6e\u4e0a\u6267\u884c\u4e86\u9519\u8bef\u7684\u8bfb\u5199\u64cd\u4f5c\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u7f13\u51b2\u533a\u6ea2\u51fa\u6216\u5806\u6ea2\u51fa\u7b49\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "aubio\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\u7684\u8865\u4e01",
"products": {
"product": "aubio aubio \u003c=0.4.8"
},
"referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2019-1010223",
"serverity": "\u9ad8",
"submitTime": "2019-07-24",
"title": "aubio\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e"
}
ghsa-v9xh-q86x-28v3
Vulnerability from github
Published
2022-05-24 22:00
Modified
2022-05-24 22:00
VLAI Severity ?
Details
aubio 0.4.8 and earlier is affected by: Buffer Overflow. The impact is: buffer overflow in strcpy. The component is: tempo. The fixed version is: after commit b1559f4c9ce2b304d8d27ffdc7128b6795ca82e5.
{
"affected": [],
"aliases": [
"CVE-2019-1010223"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2019-07-22T18:15:00Z",
"severity": "CRITICAL"
},
"details": "aubio 0.4.8 and earlier is affected by: Buffer Overflow. The impact is: buffer overflow in strcpy. The component is: tempo. The fixed version is: after commit b1559f4c9ce2b304d8d27ffdc7128b6795ca82e5.",
"id": "GHSA-v9xh-q86x-28v3",
"modified": "2022-05-24T22:00:15Z",
"published": "2022-05-24T22:00:15Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1010223"
},
{
"type": "WEB",
"url": "https://github.com/aubio/aubio/commit/b1559f4c9ce2b304d8d27ffdc7128b6795ca82e5"
},
{
"type": "WEB",
"url": "https://github.com/aubio/aubio/blob/0.4.8/src/tempo/tempo.c#L208"
}
],
"schema_version": "1.4.0",
"severity": []
}
fkie_cve-2019-1010223
Vulnerability from fkie_nvd
Published
2019-07-22 18:15
Modified
2023-11-07 03:02
Severity ?
Summary
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19800. Reason: This candidate is a reservation duplicate of CVE-2018-19800. Notes: All CVE users should reference CVE-2018-19800 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
References
| URL | Tags |
|---|
Impacted products
| Vendor | Product | Version |
|---|
{
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19800. Reason: This candidate is a reservation duplicate of CVE-2018-19800. Notes: All CVE users should reference CVE-2018-19800 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
}
],
"id": "CVE-2019-1010223",
"lastModified": "2023-11-07T03:02:17.953",
"metrics": {},
"published": "2019-07-22T18:15:11.197",
"references": [],
"sourceIdentifier": "josh@bress.net",
"vulnStatus": "Rejected"
}
gsd-2019-1010223
Vulnerability from gsd
Modified
2023-12-13 01:23
Details
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19800. Reason: This candidate is a reservation duplicate of CVE-2018-19800. Notes: All CVE users should reference CVE-2018-19800 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2019-1010223",
"description": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19800. Reason: This candidate is a reservation duplicate of CVE-2018-19800. Notes: All CVE users should reference CVE-2018-19800 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.",
"id": "GSD-2019-1010223",
"references": [
"https://www.suse.com/security/cve/CVE-2019-1010223.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2019-1010223"
],
"details": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19800. Reason: This candidate is a reservation duplicate of CVE-2018-19800. Notes: All CVE users should reference CVE-2018-19800 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.",
"id": "GSD-2019-1010223",
"modified": "2023-12-13T01:23:50.708121Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-1010223",
"STATE": "REJECT"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19800. Reason: This candidate is a reservation duplicate of CVE-2018-19800. Notes: All CVE users should reference CVE-2018-19800 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage."
}
]
}
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…