An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure related to mishandling of the NAN and INFINITY floating-point values.
| Reporter | Title | Published | Views | Family All 79 |
|---|---|---|---|---|
 | libsndfile -- out-of-bounds reads | 11 Sep 201700:00 | – | freebsd |
 | CVE-2017-17457 | 20 Feb 202603:57 | – | attackerkb |
 | The vulnerability of the d2alaw_array() function in the SI libsndfile library, which involves reading data beyond the permissible buffer size, allows an attacker to access confidential data and also cause a service failure. | 18 Aug 202100:00 | – | bdu_fstec |
 | CVE-2017-14246 affecting package libsndfile 1.0.28-14 | 7 Apr 202100:22 | – | cbl_mariner |
| CVE-2017-14246 affecting package libsndfile 1.0.28-14 | 7 Apr 202100:22 | – | cbl_mariner |
 | libsndfile d2ulaw_array() function out-of-bounds read vulnerability (CNVD-2017-34008) | 22 Sep 201700:00 | – | cnvd |
 | CVE-2017-14246 | 21 Sep 201713:00 | – | cve |
 | CVE-2017-14246 | 21 Sep 201713:00 | – | cvelist |
 | [SECURITY] [DLA 1618-1] libsndfile security update | 26 Dec 201808:42 | – | debian |
| [SECURITY] [DLA 2418-1] libsndfile security update | 29 Oct 202016:00 | – | debian |
10
Node
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
28 Jan 2021 08:00Current
7High risk
Vulners AI Score7
CVSS 25.8
CVSS 38.1
CVSS 3.18.1
EPSS0.02229