critical9.8
CVE-2018-17825
An issue was discovered in AdPlug 2.3.1.
Impact
An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuopl class in emuopl.cpp because of a destructor's two OPLDestroy calls, each of which frees TL_TABLE, SIN_TABLE, AMS_TABLE, and VIB_TABLE.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adplug Project | Adplug | Version 2.3.1 |
| Fedoraproject | Fedora | Versions 32, 33 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/adplug/adplug/issues/67
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q32A64R2APAC5PXIMSYIEFDQX5AD4GAS/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3PW6PLDTPSQQRHKTU2FB72SUB4Q66NE/
- https://github.com/adplug/adplug/issues/67
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q32A64R2APAC5PXIMSYIEFDQX5AD4GAS/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3PW6PLDTPSQQRHKTU2FB72SUB4Q66NE/