Summary
It was discovered that libsndfile incorrectly handled certain malformed
files. A remote attacker could use this issue to cause libsndfile to crash,
resulting in a denial of service, or possibly execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | libsndfile | 1.0.25-10ubuntu0.16.04.2 |
| Ubuntu · 18.04 LTS 18.04:LTS | libsndfile | 1.0.28-4ubuntu0.18.04.1 |
Vulnerabilities 13
-
Low 3.3
It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of…
-
Unscored —
An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or …
-
Unscored —
An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or …
-
Unscored —
In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c, which may lead to Do…
-
Unscored —
In libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists in the function wav_w64_read_fmt_chunk() in wav_w…
-
Unscored —CVE-2017-17456 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14245. Reason: This candidate is a duplicate of CVE-2017-14245. …
-
Unscored —CVE-2017-17457 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14246. Reason: This candidate is a duplicate of CVE-2017-14246. …
-
Unscored —
In libsndfile version 1.0.28, an error in the "aiff_read_chanmap()" function (aiff.c) can be exploited to cause an out-…
-
Unscored —
A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial …
-
Unscored —
An issue was discovered in libsndfile 1.0.28. There is a NULL pointer dereference in the function sf_write_int in sndfi…
-
Unscored —
An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulaw_array in ulaw.c that w…
-
Unscored —
An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alaw_array in alaw.c that w…
-
Unscored —
There is a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a denial of se…
References
-
report
https://ubuntu.com/security/CVE-2017-6892
-
report
https://ubuntu.com/security/CVE-2017-14245
-
report
https://ubuntu.com/security/CVE-2017-14246
-
report
https://ubuntu.com/security/CVE-2017-14634
-
report
https://ubuntu.com/security/CVE-2017-16942
-
report
https://ubuntu.com/security/CVE-2017-17456
-
report
https://ubuntu.com/security/CVE-2017-17457
-
report
https://ubuntu.com/security/CVE-2018-13139
-
report
https://ubuntu.com/security/CVE-2018-19432
-
report
https://ubuntu.com/security/CVE-2018-19661
-
report
https://ubuntu.com/security/CVE-2018-19662
-
report
https://ubuntu.com/security/CVE-2018-19758
-
report
https://ubuntu.com/security/CVE-2019-3832