{"action":"Upgrade aubio to 0.4.7 or later.","affected":[{"fixed":"0.4.7","introduced":"0"}],"component":"aubio","cve_ids":["CVE-2017-17555"],"ecosystem":"PyPI","epss":0.01055,"exploited":false,"fixed_versions":["0.4.7"],"id":"tcs_01M5KG7GMBDF82H4JFM881FT2Q","modified_at":"2023-11-08T03:59:14.586629Z","published_at":"2017-12-12T01:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2017-77","https://github.com/IvanCql/vulnerability/blob/master/An%20NULL%20pointer%20dereference(DoS)%20Vulnerability%20was%20found%20in%20function%20swri_audio_convert%20of%20ffmpeg%20libswresample.md","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2017-77","url":"https://osv.dev/vulnerability/PYSEC-2017-77"}],"summary":"The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows remote attackers to cause a denial of servic"}