CVE:CVE-2019-1010315
CNNVD:CNNVD-201907-674
WavPack是一套开源的、免费的音频无损压缩软件。
WavPack 5.1及之前版本中存在数字错误漏洞。该漏洞源于网络系统或产品未正确计算或转换所产生的数字。攻击者可利用该漏洞导致整数溢出或符号错误等。
solution:Upgrade wavpack wavpack to a higher version than 5.1.0,and avoid the version (,5.1.0]; Upgrade fedoraproject fedora to a higher version than 30,31,and avoid the version 30,31; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade canonical ubuntu_linux to a higher version than 18.04,19.04,and avoid the version 18.04,19.04