Errata overview
Errata ID 55
Date 2018-05-16
Source package libmad
Fixed in version 0.15.1b-8+deb9u1
Description
This update addresses the following issues:
* The mad_layer_III function in layer3.c, if NDEBUG is omitted, allows remote
  attackers to cause a denial of service (assertion failure and application
  exit) via a crafted audio file. (CVE-2017-8372)
* The mad_layer_III function in layer3.c allows remote attackers to cause a
  denial of service (heap-based buffer overflow and application crash) or
  possibly have unspecified other impact via a crafted audio file.
  (CVE-2017-8373)
* The mad_bit_skip function in bit.c allows remote attackers to cause a
  denial of service (heap-based buffer over-read and application crash) via a
  crafted audio file. (CVE-2017-8374)
Additional notes
CVE ID CVE-2017-8372
CVE-2017-8373
CVE-2017-8374
UCS Bug number #46964