CVE-2019-13147: Null Pointer Dereference
Published Jul 1, 2019
·Updated
In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linearbuf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.
Affected Software
4 affected componentsFixes available
debian/audiofile<=0.3.6-5
0.3.6-7
Audio File Library Project Audio File Library=0.3.6
Debian Debian Linux=10.0
Audiofile audiofile=0.3.6
Event History
Jul 1, 2019
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Jul 2, 2019
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeaknessAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·11:16 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·02:10 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-13147?
CVE-2019-13147 has been classified as a denial of service vulnerability due to a NULL pointer dereference.
2
How do I fix CVE-2019-13147?
To remediate CVE-2019-13147, update the Audio File Library to version 0.3.6-7 or a later version.
3
Which versions of Audio File Library are affected by CVE-2019-13147?
CVE-2019-13147 affects Audio File Library version 0.3.6 and earlier versions.
4
Can CVE-2019-13147 be exploited remotely?
Yes, CVE-2019-13147 can be exploited remotely via a crafted audio file.
5
What systems are primarily impacted by CVE-2019-13147?
CVE-2019-13147 primarily impacts systems running Debian Linux version 10.0 with vulnerable versions of the Audio File Library.