Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-13139: A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file. The vulnerability can be triggered by the executable sndfile-deinterleave. 1598480: CVE-2018-13139 libsndfile: stack-based buffer overflow in sndfile-deinterleave utility
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | libsndfile | 0:1.0.25-11.amzn2 |
| Amazon Linux · 2 | libsndfile-debuginfo | 0:1.0.25-11.amzn2 |
| Amazon Linux · 2 | libsndfile-devel | 0:1.0.25-11.amzn2 |
| Amazon Linux · 2 | libsndfile-utils | 0:1.0.25-11.amzn2 |
Vulnerabilities 1
-
Unscored —
A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial …
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-13139.html