Lucene search
K

An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure related to mishandling of the NAN and INFINITY floating-point values.

🗓️ 28 Jan 2021 08:00:00Reported by MicrosoftType 
mscve
 mscve
🔗 msrc.microsoft.com👁 2 Views

Out of bounds read in d2alaw_array in alaw.c of libsndfile 1.0.28 may enable remote denial of service or information disclosure due to NAN and INFINITY handling.

Related
Detection
ReporterTitlePublishedViews
Family
FreeBSD
libsndfile -- out-of-bounds reads
11 Sep 201700:00
freebsd
ATTACKERKB
CVE-2017-17456
20 Feb 202603:57
attackerkb
CBLMariner
CVE-2017-14245 affecting package libsndfile 1.0.28-14
7 Apr 202100:22
cbl_mariner
CBLMariner
CVE-2017-14245 affecting package libsndfile 1.0.28-14
7 Apr 202100:22
cbl_mariner
CNVD
libsndfile d2alaw_array() function out-of-bounds read vulnerability
22 Sep 201700:00
cnvd
CVE
CVE-2017-14245
21 Sep 201713:00
cve
Cvelist
CVE-2017-14245
21 Sep 201713:00
cvelist
Debian
[SECURITY] [DLA 1618-1] libsndfile security update
26 Dec 201808:42
debian
Debian
[SECURITY] [DLA 2418-1] libsndfile security update
29 Oct 202016:00
debian
Debian CVE
CVE-2017-14245
21 Sep 201713:00
debiancve
Rows per page
Vulners

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

28 Jan 2021 08:00Current
7High risk
Vulners AI Score7
CVSS 25.8
CVSS 38.1
CVSS 3.18.1
EPSS0.00428
2