CVE Vulnerabilities

CVE-2017-5851

NULL Pointer Dereference

Published: Mar 01, 2017 | Modified: Apr 20, 2025
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
LOW
root.io logo minimus.io logo echo.ai logo

The free_options function in options_manager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file. NOTE: this typically has no risk; this crash of this command-line program has no further consequences for availability.

Weakness

The product dereferences a pointer that it expects to be valid but is NULL.

Affected Software

NameVendorStart VersionEnd Version
Mp3spltMp3splt_project2.6.2 (including)2.6.2 (including)
Mp3spltUbuntuartful*
Mp3spltUbuntubionic*
Mp3spltUbuntucosmic*
Mp3spltUbuntudevel*
Mp3spltUbuntudisco*
Mp3spltUbuntueoan*
Mp3spltUbuntuesm-apps/bionic*
Mp3spltUbuntuesm-apps/focal*
Mp3spltUbuntuesm-apps/jammy*
Mp3spltUbuntuesm-apps/noble*
Mp3spltUbuntuesm-apps/xenial*
Mp3spltUbuntufocal*
Mp3spltUbuntugroovy*
Mp3spltUbuntuhirsute*
Mp3spltUbuntuimpish*
Mp3spltUbuntujammy*
Mp3spltUbuntukinetic*
Mp3spltUbuntulunar*
Mp3spltUbuntumantic*
Mp3spltUbuntunoble*
Mp3spltUbuntuoracular*
Mp3spltUbuntuplucky*
Mp3spltUbuntuprecise*
Mp3spltUbuntuquesting*
Mp3spltUbuntutrusty*
Mp3spltUbuntuupstream*
Mp3spltUbuntuxenial*
Mp3spltUbuntuyakkety*
Mp3spltUbuntuzesty*

Potential Mitigations

References