6.5

CVE-2017-17446: game-music-emu_project game-music-emu

CVSS: 6.5v3.0MediumModified
AliasesUBUNTU-CVE-2017-17446USN-4816-1DEBIAN-CVE-2017-17446
Published 06-12-2017Last modified 16-09-2024
Open JSON

Vulnerability summary

CVE-2017-17446 is a medium (CVSS 6.5) vulnerability in game-music-emu_project game-music-emu. EPSS estimates a 1.52% chance of exploitation in the next 30 days, higher than 74.4% of scored vulnerabilities.

Overall risk
26/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.5/10
010
Medium · v3.0 (NVD)
EPSS score
1.52%
0%100%
Low · -0.25 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 06-12-2017
    PublishedVulnerability first disclosed.
  2. 16-09-2024
    Last modifiedVulnerability information updated.

Description

The Mem_File_Reader::read_avail function in Data_Reader.cpp in the Game_Music_Emu library (aka game-music-emu) 0.6.1 does not ensure a non-negative size, which allows remote attackers to cause a denial of service (application crash) via a crafted file.

CVSS metrics

4 scores · 3 sources · 2 versions

EPSS trend

Probability

1.52%

Chance of exploitation in the next 30 days

Percentile

74%

Versus all other CVEs

30-day change

-0.25 pp

From 1.78% on 21-09-2026

21-09-202621-10-2026
EPSS score
1.52%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Debian1 product
  • game-music-emu< 0.6.2-1
Game-music-emu_project1 product
Ubuntu1 product
  • game-music-emu< 0.5.5-2ubuntu0.14.04.1+esm1 | < 0.6.0-3ubuntu0.16.04.1+esm1

3 vendors · 3 products

References

6 links