Lucene search

K
mageiaGentoo FoundationMGASA-2015-0015
HistoryJan 08, 2015 - 3:36 p.m.

Updated libsndfile packages fix CVE-2014-9496

2015-01-0815:36:22
Gentoo Foundation
advisories.mageia.org
8

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.005 Low

EPSS

Percentile

75.0%

Updated libsndfile packages fix security vulnerabilities: libsndfile contains multiple buffer-overflow vulnerabilities in src/sd2.c because it fails to properly bounds-check user supplied input, which may allow an attacker to execute arbitrary code or cause a denial of service (CVE-2014-9496). libsndfile contains a divide-by-zero error in src/file_io.c which may allow an attacker to cause a denial of service.

OSVersionArchitecturePackageVersionFilename
Mageia4noarchlibsndfile< 1.0.25-3.1libsndfile-1.0.25-3.1.mga4

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.005 Low

EPSS

Percentile

75.0%