Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-4xqx-q5an-63df
SummaryThe swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted audio file.
Aliases
0
alias CVE-2017-17555
1
alias PYSEC-2017-77
Fixed_packages
0
url pkg:pypi/aubio@0.4.7
purl pkg:pypi/aubio@0.4.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vct-fzbc-27ep
1
vulnerability VCID-3yb2-e9ke-auc4
2
vulnerability VCID-uavx-j693-b3bj
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/aubio@0.4.7
Affected_packages
0
url pkg:pypi/aubio@0.4.3a1
purl pkg:pypi/aubio@0.4.3a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vct-fzbc-27ep
1
vulnerability VCID-3yb2-e9ke-auc4
2
vulnerability VCID-4xqx-q5an-63df
3
vulnerability VCID-7uwy-g2fv-xfc7
4
vulnerability VCID-ecxp-5hv8-mbbd
5
vulnerability VCID-eymz-cpuw-1kcb
6
vulnerability VCID-t5xc-9bzf-5kas
7
vulnerability VCID-uavx-j693-b3bj
8
vulnerability VCID-zvqm-pym8-9ug8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/aubio@0.4.3a1
1
url pkg:pypi/aubio@0.4.3a2
purl pkg:pypi/aubio@0.4.3a2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vct-fzbc-27ep
1
vulnerability VCID-3yb2-e9ke-auc4
2
vulnerability VCID-4xqx-q5an-63df
3
vulnerability VCID-7uwy-g2fv-xfc7
4
vulnerability VCID-ecxp-5hv8-mbbd
5
vulnerability VCID-eymz-cpuw-1kcb
6
vulnerability VCID-t5xc-9bzf-5kas
7
vulnerability VCID-uavx-j693-b3bj
8
vulnerability VCID-zvqm-pym8-9ug8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/aubio@0.4.3a2
2
url pkg:pypi/aubio@0.4.3
purl pkg:pypi/aubio@0.4.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vct-fzbc-27ep
1
vulnerability VCID-3yb2-e9ke-auc4
2
vulnerability VCID-4xqx-q5an-63df
3
vulnerability VCID-7uwy-g2fv-xfc7
4
vulnerability VCID-ecxp-5hv8-mbbd
5
vulnerability VCID-eymz-cpuw-1kcb
6
vulnerability VCID-t5xc-9bzf-5kas
7
vulnerability VCID-uavx-j693-b3bj
8
vulnerability VCID-zvqm-pym8-9ug8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/aubio@0.4.3
3
url pkg:pypi/aubio@0.4.3.post1
purl pkg:pypi/aubio@0.4.3.post1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vct-fzbc-27ep
1
vulnerability VCID-3yb2-e9ke-auc4
2
vulnerability VCID-4xqx-q5an-63df
3
vulnerability VCID-7uwy-g2fv-xfc7
4
vulnerability VCID-ecxp-5hv8-mbbd
5
vulnerability VCID-eymz-cpuw-1kcb
6
vulnerability VCID-t5xc-9bzf-5kas
7
vulnerability VCID-uavx-j693-b3bj
8
vulnerability VCID-zvqm-pym8-9ug8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/aubio@0.4.3.post1
4
url pkg:pypi/aubio@0.4.4
purl pkg:pypi/aubio@0.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vct-fzbc-27ep
1
vulnerability VCID-3yb2-e9ke-auc4
2
vulnerability VCID-4xqx-q5an-63df
3
vulnerability VCID-7uwy-g2fv-xfc7
4
vulnerability VCID-ecxp-5hv8-mbbd
5
vulnerability VCID-eymz-cpuw-1kcb
6
vulnerability VCID-t5xc-9bzf-5kas
7
vulnerability VCID-uavx-j693-b3bj
8
vulnerability VCID-zvqm-pym8-9ug8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/aubio@0.4.4
5
url pkg:pypi/aubio@0.4.5
purl pkg:pypi/aubio@0.4.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vct-fzbc-27ep
1
vulnerability VCID-3yb2-e9ke-auc4
2
vulnerability VCID-4xqx-q5an-63df
3
vulnerability VCID-7uwy-g2fv-xfc7
4
vulnerability VCID-ecxp-5hv8-mbbd
5
vulnerability VCID-eymz-cpuw-1kcb
6
vulnerability VCID-t5xc-9bzf-5kas
7
vulnerability VCID-uavx-j693-b3bj
8
vulnerability VCID-zvqm-pym8-9ug8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/aubio@0.4.5
6
url pkg:pypi/aubio@0.4.6
purl pkg:pypi/aubio@0.4.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vct-fzbc-27ep
1
vulnerability VCID-3yb2-e9ke-auc4
2
vulnerability VCID-4xqx-q5an-63df
3
vulnerability VCID-7uwy-g2fv-xfc7
4
vulnerability VCID-ecxp-5hv8-mbbd
5
vulnerability VCID-eymz-cpuw-1kcb
6
vulnerability VCID-t5xc-9bzf-5kas
7
vulnerability VCID-uavx-j693-b3bj
8
vulnerability VCID-zvqm-pym8-9ug8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/aubio@0.4.6
References
0
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html
1
reference_url https://github.com/IvanCql/vulnerability/blob/master/An%20NULL%20pointer%20dereference(DoS)%20Vulnerability%20was%20found%20in%20function%20swri_audio_convert%20of%20ffmpeg%20libswresample.md
reference_id
reference_type
scores
url https://github.com/IvanCql/vulnerability/blob/master/An%20NULL%20pointer%20dereference(DoS)%20Vulnerability%20was%20found%20in%20function%20swri_audio_convert%20of%20ffmpeg%20libswresample.md
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-17555
reference_id CVE-2017-17555
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2017-17555
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 476
name NULL Pointer Dereference
description A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-4xqx-q5an-63df