Summary
Agostino Sarubbo and Jakub Jirasek discovered that libsndfile incorrectly
handled certain malformed files. A remote attacker could use this issue to
cause libsndfile to crash, resulting in a denial of service, or possibly
execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libsndfile | 1.0.25-7ubuntu2.2 |
| Ubuntu · 16.04 LTS 16.04:LTS | libsndfile | 1.0.25-10ubuntu0.16.04.1 |
Vulnerabilities 8
-
Unscored —
In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-b…
-
Unscored —
In libsndfile before 1.0.28, an error in the "header_read()" function (common.c) when handling ID3 tags can be exploite…
-
Unscored —
In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segment…
-
Unscored —
In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segment…
-
Unscored —
The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buff…
-
Unscored —
The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (inva…
-
Unscored —
The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (heap…
-
Unscored —
The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer ove…
References
-
report
https://ubuntu.com/security/CVE-2017-7585
-
report
https://ubuntu.com/security/CVE-2017-7586
-
report
https://ubuntu.com/security/CVE-2017-7741
-
report
https://ubuntu.com/security/CVE-2017-7742
-
report
https://ubuntu.com/security/CVE-2017-8361
-
report
https://ubuntu.com/security/CVE-2017-8362
-
report
https://ubuntu.com/security/CVE-2017-8363
-
report
https://ubuntu.com/security/CVE-2017-8365