CVE-2017-15954 - bchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow (with a resultant invalid free) and crash when processing a malformed CUE (.cue) file

Back Back to CVE browser

MEDIUM

bchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow (with a resultant invalid free) and crash when processing a malformed CUE (.cue) file

Published Oct 28, 2017

5.5

MEDIUM

CVSS 3.0

EPSS 1.00%

Description

bchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow (with a resultant invalid free) and crash when processing a malformed CUE (.cue) file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (4)

https://github.com/extramaster/bchunk/issues/3
x_refsource_MISCIssue TrackingPatchThird Party Advisory
https://github.com/hessu/bchunk/issues/1
x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2017/11/msg00001.html
mailing-listx_refsource_MLIST
https://www.debian.org/security/2017/dsa-4026
vendor-advisoryx_refsource_DEBIANThird Party Advisory

Link	Providers	Tags
https://github.com/extramaster/bchunk/issues/3		x_refsource_MISCIssue TrackingPatchThird Party Advisory
https://github.com/hessu/bchunk/issues/1		x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2017/11/msg00001.html		mailing-listx_refsource_MLIST
https://www.debian.org/security/2017/dsa-4026		vendor-advisoryx_refsource_DEBIANThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 28, 2017

Updated Aug 5, 2024

Reserved Oct 28, 2017

Link CVE-2017-15954

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-15954

Red Hat

Severity n/a

Public date n/a

Links CVE-2017-15954