Summary
It was discovered that libsndfile incorrectly handled certain malformed
files. A remote attacker could use this issue to cause libsndfile to
crash, resulting in a denial of service, or possibly execute arbitrary
code. (CVE-2017-12562)
It was discovered that libsndfile incorrectly handled certain malformed
files. A remote attacker could use this issue to cause libsndfile to
crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only affected Ubuntu 14.04 ESM. (CVE-2017-14245,
CVE-2017-14246, CVE-2017-14634, CVE-2017-16942, CVE-2017-6892,
CVE-2018-13139, CVE-2018-19432, CVE-2018-19661, CVE-2018-19662,
CVE-2018-19758, CVE-2019-3832)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | libsndfile | 1.0.25-10ubuntu0.16.04.3 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | libsndfile | 1.0.25-7ubuntu2.2+esm1 |
Vulnerabilities 12
-
Low 3.3
It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of…
-
Unscored —
Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through 1.0.28 allows remote …
-
Unscored —
An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or …
-
Unscored —
An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or …
-
Unscored —
In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c, which may lead to Do…
-
Unscored —
In libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists in the function wav_w64_read_fmt_chunk() in wav_w…
-
Unscored —
In libsndfile version 1.0.28, an error in the "aiff_read_chanmap()" function (aiff.c) can be exploited to cause an out-…
-
Unscored —
A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial …
-
Unscored —
An issue was discovered in libsndfile 1.0.28. There is a NULL pointer dereference in the function sf_write_int in sndfi…
-
Unscored —
An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulaw_array in ulaw.c that w…
-
Unscored —
An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alaw_array in alaw.c that w…
-
Unscored —
There is a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a denial of se…
References
-
report
https://ubuntu.com/security/CVE-2017-6892
-
report
https://ubuntu.com/security/CVE-2017-12562
-
report
https://ubuntu.com/security/CVE-2017-14245
-
report
https://ubuntu.com/security/CVE-2017-14246
-
report
https://ubuntu.com/security/CVE-2017-14634
-
report
https://ubuntu.com/security/CVE-2017-16942
-
report
https://ubuntu.com/security/CVE-2018-13139
-
report
https://ubuntu.com/security/CVE-2018-19432
-
report
https://ubuntu.com/security/CVE-2018-19661
-
report
https://ubuntu.com/security/CVE-2018-19662
-
report
https://ubuntu.com/security/CVE-2018-19758
-
report
https://ubuntu.com/security/CVE-2019-3832