CVE-2018-17095

An issue has been discovered in mpruett Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert...

CVE-2018-17095

An issue has been discovered in mpruett Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert...

CVE-2018-17095

An issue has been discovered in mpruett Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert...

PT-2018-13891 · Mpruett +6 · Audiofile +6

Name of the Vulnerable Software and Affected Versions: mpruett Audio File Library aka audiofile versions 0.3.0 through 0.3.6 Description: A heap-based buffer overflow issue has been found in the Expand3To4Module::run function when running sfconvert, potentially leading to exploitation...

MGASA-2018-0336 Updated libsndfile packages fix security vulnerabilities

Updated libsndfile package fixes security vulnerabilities: The function d2alawarray in alaw.c of libsndfile 1.0.29pre1 may lead to a remote DoS attack CVE-2017-17456. The function d2ulawarray in ulaw.c of libsndfile 1.0.29pre1 may lead to a remote DoS attack CVE-2017-17457. A stack-based buffer...

Updated libsndfile packages fix security vulnerabilities

Updated libsndfile package fixes security vulnerabilities: The function d2alawarray in alaw.c of libsndfile 1.0.29pre1 may lead to a remote DoS attack CVE-2017-17456. The function d2ulawarray in ulaw.c of libsndfile 1.0.29pre1 may lead to a remote DoS attack CVE-2017-17457. A stack-based buffer...

Security update for python (moderate)

This update for python fixes the following issues: The following security vulnerabilities were addressed: - Add a check to Lib/wave.py that verifies that at least one channel is provided. Prior to this, attackers could cause a denial of service via a crafted wav format audio file. bsc1083507,...

Denial Of Service (DoS)

libsndfile.so is vulnerable to denial of service DoS attacks. A malicious audio file input to the function wavw64readfmtchunk in wavw64.c causes a heap-based buffer overflow, leading to a DoS attack...

Denial Of Service (DoS)

libaudiofile.so is vulnerable to denial of service DoS. The vulnerability can be triggered by causing a heap-based buffer overflow in the Expand3To4Module::run function of SimpleModule.h by sending a malicious audio file...

SUSE SLED12 / SLES12 Security Update : python (SUSE-SU-2018:2040-1)

This update for python fixes the following issues: The following security vulnerabilities were addressed : - Add a check to Lib/wave.py that verifies that at least one channel is provided. Prior to this, attackers could cause a denial of service via a crafted wav format audio file. bsc1083507,...

Debian DLA-1430-1 : taglib security update

CVE-2018-11439 Fix for a heap-based buffer over-read via a crafted audio file. For Debian 8 'Jessie', these problems have been fixed in version 1.9.1-2.1+deb8u1. We recommend that you upgrade your taglib packages. NOTE: Tenable Network Security has extracted the preceding description block direct...

CVE-2018-14394

libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted Waveform audio file...

Design/Logic Flaw

libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted Waveform audio file...

CVE-2018-14395

libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted audio file when converting to the MOV audio format...

CVE-2018-14395

libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted audio file when converting to the MOV audio format...

CVE-2018-14394

libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted Waveform audio file...

UBUNTU-CVE-2018-14395

libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted audio file when converting to the MOV audio format...

DEBIAN-CVE-2018-14395

libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted audio file when converting to the MOV audio format...

CVE-2018-14395

CVE-2018-14395 affects FFmpeg 3.2 and 4.0.2, where in libavformat/movenc.c a crafted audio file can trigger a divide-by-zero, causing a denial of service (application crash) when converting to MOV audio. Connected advisories confirm fixes in FFmpeg updates (e.g., SUSE SUSE-SU-2019:1299-1/2 and De...

Ffmpeg Denial of Service Vulnerability (CNVD-2018-13660)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavformat/movenc.c file in FFmpeg versions prior to 4.0.2. The vulnerability can be exploited by an attacker to cause a denial of service applicatio...