CVE-2022-2476 Null dereference in Wavpack
A null pointer dereference in Wavpack allows attackers to cause a denial of service via crafted audio files.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2022-2476?
CVE-2022-2476 is a medium-severity vulnerability in Fedoraproject Fedora, published on 19 Jul 2022. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL ===================================================================84257==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x561b47a970c6 bp 0x7fff13952fb0 sp 0x7fff1394fca0 T0) ==84257==The signal is caused by a WRITE memory access. ==84257==Hint: address points to the zero page. #0 0x561b47a970c5 in main cli/wvunpack.c:834 #1 0x7efc4f5c0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) #2 0x561b47a945ed in _start (/usr/local/bin/wvunpack+0xa5ed) AddressSanitizer can not provide additional info. SUMMARY: AddressSanitizer: SEGV cli/wvunpack.c:834 in main ==84257==ABORTING
Weakness: CWE-476
Which versions are affected by CVE-2022-2476?
It affects 2 products.
Linux distribution packages (9)
wavpack SUSE:Linux Enterprise Module for Basesystem 15 SP3 | All versions | 5.4.0-150000.4.15.1 |
wavpack SUSE:Linux Enterprise Module for Basesystem 15 SP4 | All versions | 5.4.0-150000.4.15.1 |
wavpack SUSE:Linux Enterprise Module for Desktop Applications 15 SP3 | All versions | 5.4.0-150000.4.15.1 |
wavpack SUSE:Linux Enterprise Module for Desktop Applications 15 SP4 | All versions | 5.4.0-150000.4.15.1 |
wavpack SUSE:Linux Enterprise Server 12 SP5 | All versions | 4.60.99-5.12.1 |
wavpack SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 4.60.99-5.12.1 |
wavpack SUSE:Linux Enterprise Software Development Kit 12 SP5 | All versions | 4.60.99-5.12.1 |
wavpack openSUSE:Leap 15.3 | All versions | 5.4.0-150000.4.15.1 |
wavpack openSUSE:Leap 15.4 | All versions | 5.4.0-150000.4.15.1 |
Products include Fedoraproject Fedora, Wavpack Wavpack.
How do I fix CVE-2022-2476?
Upgrade to a fixed version.
Is CVE-2022-2476 being exploited?
There is no known exploitation of CVE-2022-2476 in the wild and no public exploit code.
Other vulnerabilities in Fedoraproject Fedora
Sources
Also known as AZL-10317, CLSA-2026-1784814430, CLSA-2026-1785754254, DEBIAN-CVE-2022-2476, GHSA-62q3-hj99-8qw6, MGASA-2022-0291 and 8 more.