CVE-2018-7254

Name	CVE-2018-7254
Description	The ParseCaffHeaderConfig function of the cli/caff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service (global buffer over-read), or possibly trigger a buffer overflow or incorrect memory allocation, via a maliciously crafted CAF file.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DSA-4125-1
Debian Bugs	889274

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
wavpack (PTS)	bookworm	5.6.0-1	fixed
	trixie	5.8.1-1	fixed
	forky, sid	5.9.0-2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin	Debian Bugs
wavpack	source	wheezy	(not affected)
wavpack	source	jessie	(not affected)
wavpack	source	stretch	5.0.0-2+deb9u1	DSA-4125-1
wavpack	source	(unstable)	5.1.0-3		889274

Notes

[jessie] - wavpack <not-affected> (Vulnerable code not present)
[wheezy] - wavpack <not-affected> (Vulnerable code not present)
https://github.com/dbry/WavPack/issues/26
https://github.com/dbry/WavPack/commit/8e3fe45a7bac31d9a3b558ae0079e2d92a04799e