Skip to content
OpenAdvisories
Medium ALAS2023-2024-572 1 CVE

Moderate: libsndfile security update (Amazon Linux 2023)

Published Mar 13, 2024 · Updated Mar 21, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-33064: An off-by-one error in function wav_read_header in src/wav.c in Libsndfile 1.1.0, results in a write out of bound, which allows an attacker to execute arbitrary code, Denial of Service or other unspecified impacts.

Fixed packages 6

ReleasePackageFixed in
Amazon Linux · 2023 libsndfile 0:1.2.2-3.amzn2023.0.1
Amazon Linux · 2023 libsndfile-debuginfo 0:1.2.2-3.amzn2023.0.1
Amazon Linux · 2023 libsndfile-debugsource 0:1.2.2-3.amzn2023.0.1
Amazon Linux · 2023 libsndfile-devel 0:1.2.2-3.amzn2023.0.1
Amazon Linux · 2023 libsndfile-utils 0:1.2.2-3.amzn2023.0.1
Amazon Linux · 2023 libsndfile-utils-debuginfo 0:1.2.2-3.amzn2023.0.1

Vulnerabilities 1

  • Unscored —
    CVE-2022-33064

    An off-by-one error in function wav_read_header in src/wav.c in Libsndfile 1.1.0, results in a write out of bound, whic…

    libsndfile Azure Linux

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-33064.html