Skip to content
OpenAdvisories
Unscored USN-6558-1 4 CVEs

audiofile vulnerabilities

Published Dec 14, 2023 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that audiofile could be made to dereference invalid
memory. If a user or an automated system were tricked into opening a
specially crafted file, an attacker could possibly use this issue to cause
a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu
18.04 LTS. (CVE-2018-13440)

It was discovered that audiofile could be made to write out of bounds. If a
user or an automated system were tricked into opening a specially crafted
file, an attacker could possibly use this issue to cause a denial of
service or execute arbitrary code. This issue only affected Ubuntu 16.04
LTS and Ubuntu 18.04 LTS. (CVE-2018-17095)

It was discovered that audiofile could be made to dereference invalid
memory. If a user or an automated system were tricked into opening a
specially crafted file, an attacker could possibly use this issue to cause
a denial of service. (CVE-2019-13147)

It was discovered that audiofile could be made to leak memory. If a user or
an automated system were tricked into opening a specially crafted file, an
attacker could possibly use this issue to obtain sensitive information.
(CVE-2022-24599)

Fixed packages 5

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS audiofile 0.3.6-5+deb10u1build0.20.04.1
Ubuntu · 22.04 LTS 22.04:LTS audiofile 0.3.6-5+deb10u1build0.22.04.1
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS audiofile 0.3.6-2ubuntu0.14.04.3+esm1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS audiofile 0.3.6-2ubuntu0.16.04.1+esm1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS audiofile 0.3.6-4ubuntu0.1~esm1

Vulnerabilities 4

References

  • report
    https://ubuntu.com/security/CVE-2018-13440
  • report
    https://ubuntu.com/security/CVE-2018-17095
  • report
    https://ubuntu.com/security/CVE-2019-13147
  • report
    https://ubuntu.com/security/CVE-2022-24599