[SECURITY] Fedora 27 Update: audiofile-0.3.6-21.fc27

The Audio File library is an implementation of the Audio File Library from SGI, which provides an API for accessing audio file formats like AIFF/AIFF-C, WAVE, and NeXT/Sun .snd/.au files. This library is used by the EsounD daemon. Install audiofile if you are installing EsounD or you need an API...

SoX: Multiple vulnerabilities

Background SoX is a command line utility that can convert various formats of computer audio files in to other formats. Description Multiple vulnerabilities have been discovered in SoX. Please review the referenced CVE identifiers for details. Impact A remote attacker, by enticing a user to proces...

CVE-2018-17095

An issue has been discovered in mpruett Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert...

CVE-2018-17095

An issue has been discovered in mpruett Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert...

CVE-2018-17095

An issue has been discovered in mpruett Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert...

CVE-2018-17095

An issue has been discovered in mpruett Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert...

CVE-2018-17095

CVE-2018-17095 — In mpruett Audio File Library (audiofile) up to version 0.3.6, a heap-based buffer overflow occurs in Expand3To4Module::run when running sfconvert. This is documented across multiple advisories (Ubuntu USN-6558-1, MiracleLinux AXSA-2020-752, Red Hat unpatched lines), indicating a...

CVE-2018-17095

An issue has been discovered in mpruett Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert...

CVE-2018-17095

An issue has been discovered in mpruett Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert...

PT-2018-13891 · Mpruett +6 · Audiofile +6

Name of the Vulnerable Software and Affected Versions: mpruett Audio File Library aka audiofile versions 0.3.0 through 0.3.6 Description: A heap-based buffer overflow issue has been found in the Expand3To4Module::run function when running sfconvert, potentially leading to exploitation...

Updated libsndfile packages fix security vulnerabilities

Updated libsndfile package fixes security vulnerabilities: The function d2alawarray in alaw.c of libsndfile 1.0.29pre1 may lead to a remote DoS attack CVE-2017-17456. The function d2ulawarray in ulaw.c of libsndfile 1.0.29pre1 may lead to a remote DoS attack CVE-2017-17457. A stack-based buffer...

MGASA-2018-0336 Updated libsndfile packages fix security vulnerabilities

Updated libsndfile package fixes security vulnerabilities: The function d2alawarray in alaw.c of libsndfile 1.0.29pre1 may lead to a remote DoS attack CVE-2017-17456. The function d2ulawarray in ulaw.c of libsndfile 1.0.29pre1 may lead to a remote DoS attack CVE-2017-17457. A stack-based buffer...

Security update for python (moderate)

This update for python fixes the following issues: The following security vulnerabilities were addressed: - Add a check to Lib/wave.py that verifies that at least one channel is provided. Prior to this, attackers could cause a denial of service via a crafted wav format audio file. bsc1083507,...

Denial Of Service (DoS)

libsndfile.so is vulnerable to denial of service DoS attacks. A malicious audio file input to the function wavw64readfmtchunk in wavw64.c causes a heap-based buffer overflow, leading to a DoS attack...

Denial Of Service (DoS)

libaudiofile.so is vulnerable to denial of service DoS. The vulnerability can be triggered by causing a heap-based buffer overflow in the Expand3To4Module::run function of SimpleModule.h by sending a malicious audio file...

SUSE SLED12 / SLES12 Security Update : python (SUSE-SU-2018:2040-1)

This update for python fixes the following issues: The following security vulnerabilities were addressed : - Add a check to Lib/wave.py that verifies that at least one channel is provided. Prior to this, attackers could cause a denial of service via a crafted wav format audio file. bsc1083507,...

Debian DLA-1430-1 : taglib security update

CVE-2018-11439 Fix for a heap-based buffer over-read via a crafted audio file. For Debian 8 'Jessie', these problems have been fixed in version 1.9.1-2.1+deb8u1. We recommend that you upgrade your taglib packages. NOTE: Tenable Network Security has extracted the preceding description block direct...

CVE-2018-14394

libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted Waveform audio file...

Design/Logic Flaw

libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted Waveform audio file...

CVE-2018-14395

libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted audio file when converting to the MOV audio format...