Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - Olli Parviainen SoundTouch 中 libSoundTouch.a 的 RateTransposer.cpp 中的 RateTransposer::setChannels 函数 2.0 允许远程攻击者造成拒绝服务（断言失败和应用程序退出），SoundStretch 即为一例。 (CVE-2018-14044)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 Olli Parviainen SoundTouch 2.0 的 libSoundTouch.a 中，RateTransposer.cpp 的 RateTransposer::setChannels 函式允許遠端攻擊者造成拒絕服務 (宣告失敗和應用程式結束)，SoundStretch 即為一例。 (CVE-2018-14044)

請注意，Nessus 依賴供應商報告的套件存在。

According to the versions of the soundtouch package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - soundtouch version up to and including 2.0.0 contains a     Buffer Overflow vulnerability in     SoundStretch/WavFile.cpp:WavInFile::readHeaderBlock()     that can result in arbitrary code execution. This     attack appear to be exploitable via victim must open     maliocius file in soundstretch     utility.(CVE-2018-1000223)

  - The RateTransposer::setChannels function in     RateTransposer.cpp in libSoundTouch.a in Olli     Parviainen SoundTouch 2.0 allows remote attackers to     cause a denial of service (assertion failure and     application exit), as demonstrated by     SoundStretch.(CVE-2018-14044)

  - The BPMDetect class in BPMDetect.cpp in libSoundTouch.a     in Olli Parviainen SoundTouch 2.0 allows remote     attackers to cause a denial of service (assertion     failure and application exit), as demonstrated by     SoundStretch.(CVE-2018-17096)

  - The TDStretch::processSamples function in     source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2     allows remote attackers to cause a denial of service     (infinite loop and CPU consumption) via a crafted wav     file.(CVE-2017-9258)

  - The TDStretch::acceptNewOverlapLength function in     source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2     allows remote attackers to cause a denial of service     (memory allocation error and application crash) via a     crafted wav file.(CVE-2017-9259)

  - The TDStretchSSE::calcCrossCorr function in     source/SoundTouch/sse_optimized.cpp in SoundTouch 1.9.2     allows remote attackers to cause a denial of service     (heap-based buffer over-read and application crash) via     a crafted wav file.(CVE-2017-9260)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Olli Parviainen SoundTouch の libSoundTouch.a における RateTransposer.cpp の RateTransposer::setChannels 関数 2.0 により、リモートの攻撃者が、サービス拒否（アサーション失敗およびアプリケーション終了）を引き起こすことが可能です。これは、SoundStretch で実証されています。 （CVE-2018-14044）

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

CVE-2018-14044、CVE-2018-14045、およびCVE-2018-1000223のセキュリティ修正

注意：Tenable Network Securityは、前述の記述ブロックをFedora更新システムのWebサイトから直接抽出しています。
Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli Parviainen     SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application     exit), as demonstrated by SoundStretch. (CVE-2018-14044)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the soundtouch package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - soundtouch version up to and including 2.0.0 contains a     Buffer Overflow vulnerability in     SoundStretch/WavFile.cpp:WavInFile::readHeaderBlock()     that can result in arbitrary code execution. This     attack appear to be exploitable via victim must open     maliocius file in soundstretch     utility.(CVE-2018-1000223)

  - The BPMDetect class in BPMDetect.cpp in libSoundTouch.a     in Olli Parviainen SoundTouch 2.0 allows remote     attackers to cause a denial of service (assertion     failure and application exit), as demonstrated by     SoundStretch.(CVE-2018-17096)

  - The RateTransposer::setChannels function in     RateTransposer.cpp in libSoundTouch.a in Olli     Parviainen SoundTouch 2.0 allows remote attackers to     cause a denial of service (assertion failure and     application exit), as demonstrated by     SoundStretch.(CVE-2018-14044)

  - The TDStretch::acceptNewOverlapLength function in     source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2     allows remote attackers to cause a denial of service     (memory allocation error and application crash) via a     crafted wav file.(CVE-2017-9259)

  - The TDStretch::processSamples function in     source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2     allows remote attackers to cause a denial of service     (infinite loop and CPU consumption) via a crafted wav     file.(CVE-2017-9258)

  - The TDStretchSSE::calcCrossCorr function in     source/SoundTouch/sse_optimized.cpp in SoundTouch 1.9.2     allows remote attackers to cause a denial of service     (heap-based buffer over-read and application crash) via     a crafted wav file.(CVE-2017-9260)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the soundtouch package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The BPMDetect class in BPMDetect.cpp in libSoundTouch.a     in Olli Parviainen SoundTouch 2.0 allows remote     attackers to cause a denial of service (assertion     failure and application exit), as demonstrated by     SoundStretch.(CVE-2018-17096)

  - The TDStretchSSE::calcCrossCorr function in     source/SoundTouch/sse_optimized.cpp in SoundTouch 1.9.2     allows remote attackers to cause a denial of service     (heap-based buffer over-read and application crash) via     a crafted wav file.(CVE-2017-9260)

  - The TDStretch::processSamples function in     source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2     allows remote attackers to cause a denial of service     (infinite loop and CPU consumption) via a crafted wav     file.(CVE-2017-9258)

  - The TDStretch::acceptNewOverlapLength function in     source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2     allows remote attackers to cause a denial of service     (memory allocation error and application crash) via a     crafted wav file.(CVE-2017-9259)

  - The RateTransposer::setChannels function in     RateTransposer.cpp in libSoundTouch.a in Olli     Parviainen SoundTouch 2.0 allows remote attackers to     cause a denial of service (assertion failure and     application exit), as demonstrated by     SoundStretch.(CVE-2018-14044)

  - soundtouch version up to and including 2.0.0 contains a     Buffer Overflow vulnerability in     SoundStretch/WavFile.cpp:WavInFile::readHeaderBlock()     that can result in arbitrary code execution. This     attack appear to be exploitable via victim must open     maliocius file in soundstretch     utility.(CVE-2018-1000223)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2018-14044, CVE-2018-14045 and CVE-2018-1000223

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
222338	Linux Distros 未修补的漏洞: CVE-2018-14044	Nessus	Misc.	2025/3/4	2025/9/14	high
222338	Linux Distros 未修補弱點：CVE-2018-14044	Nessus	Misc.	2025/3/4	2025/9/14	high
148048	EulerOS 2.0 SP5 : soundtouch (EulerOS-SA-2021-1705)	Nessus	Huawei Local Security Checks	2021/3/24	2021/3/26	high
222338	Linux Distros のパッチ未適用の脆弱性: CVE-2018-14044	Nessus	Misc.	2025/3/4	2025/9/14	high
112102	Fedora 27：soundtouch（2018-fadf6f5a9f）	Nessus	Fedora Local Security Checks	2018/8/24	2024/8/14	high
120911	Fedora 28：soundtouch（2018-f4f75985b8）	Nessus	Fedora Local Security Checks	2019/1/3	2024/6/28	high
222338	Linux Distros Unpatched Vulnerability : CVE-2018-14044	Nessus	Misc.	2025/3/4	2025/9/14	high
149126	EulerOS 2.0 SP3 : soundtouch (EulerOS-SA-2021-1849)	Nessus	Huawei Local Security Checks	2021/4/30	2021/5/4	high
153259	EulerOS 2.0 SP2 : soundtouch (EulerOS-SA-2021-2449)	Nessus	Huawei Local Security Checks	2021/9/14	2021/9/16	high
112102	Fedora 27 : soundtouch (2018-fadf6f5a9f)	Nessus	Fedora Local Security Checks	2018/8/24	2024/8/14	high
120911	Fedora 28 : soundtouch (2018-f4f75985b8)	Nessus	Fedora Local Security Checks	2019/1/3	2024/6/28	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high