Medium ELSA-2020-1636 2 CVEs

Moderate: libsndfile security update (Oracle Linux 8)

Published May 5, 2020 · Updated May 5, 2020

Ecosystem: Oracle Linux

Summary

[1.0.28-10]
- fix CVE-2018-19661 and CVE-2018-19662 - buffer over-read in the function
i2alaw_array in alaw (#1673085)

[1.0.28-9]
- fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility (#1598482)

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	libsndfile	0:1.0.28-10.el8

Vulnerabilities 2

Unscored —

CVE-2018-13139

A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial …

libsndfile libsndfile libsndfile Debian Ubuntu Alpine

Jul 4, 2018
Unscored —

CVE-2018-19662

An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alaw_array in alaw.c that w…

libsndfile libsndfile libsndfile Debian Ubuntu Alpine

Nov 29, 2018