CVE-2022-33065

2023-07-1814:15:12

Debian Security Bug Tracker

security-tracker.debian.org

libsndfile

integer overflow

au.c

mat4.c

denial of service

unspecified impacts

cve-2022-33065

unix

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

21.6%

JSON

Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.

OSVersionArchitecturePackageVersionFilename
Debian12alllibsndfile<= 1.2.0-1libsndfile_1.2.0-1_all.deb
Debian11alllibsndfile<= 1.0.31-2libsndfile_1.0.31-2_all.deb
Debian10alllibsndfile<= 1.0.28-6+deb10u1libsndfile_1.0.28-6+deb10u1_all.deb
Debian999alllibsndfile<= 1.2.2-1libsndfile_1.2.2-1_all.deb
Debian13alllibsndfile<= 1.2.2-1libsndfile_1.2.2-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libsndfile	<= 1.2.0-1	libsndfile_1.2.0-1_all.deb
Debian	11	all	libsndfile	<= 1.0.31-2	libsndfile_1.0.31-2_all.deb
Debian	10	all	libsndfile	<= 1.0.28-6+deb10u1	libsndfile_1.0.28-6+deb10u1_all.deb
Debian	999	all	libsndfile	<= 1.2.2-1	libsndfile_1.2.2-1_all.deb
Debian	13	all	libsndfile	<= 1.2.2-1	libsndfile_1.2.2-1_all.deb