Skip to content
OpenAdvisories
Medium ALAS2-2020-1435 1 CVE

Moderate: libsndfile security update (Amazon Linux 2)

Published Jun 16, 2020 · Updated Jun 17, 2020

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-13139: A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file. The vulnerability can be triggered by the executable sndfile-deinterleave. 1598480: CVE-2018-13139 libsndfile: stack-based buffer overflow in sndfile-deinterleave utility

Fixed packages 4

ReleasePackageFixed in
Amazon Linux · 2 libsndfile 0:1.0.25-11.amzn2
Amazon Linux · 2 libsndfile-debuginfo 0:1.0.25-11.amzn2
Amazon Linux · 2 libsndfile-devel 0:1.0.25-11.amzn2
Amazon Linux · 2 libsndfile-utils 0:1.0.25-11.amzn2

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2018-13139.html