CVE-2017-6827

Heap-based buffer overflow in the MSADPCM::initializeCoefficients function in MSADPCM.cpp in audiofile aka libaudiofile and Audio File Library 0.3.6 allows remote attackers to have unspecified impact via a crafted audio file...

AZL-36920 CVE-2017-6828 affecting package audiofile 0.3.6-27

Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile aka libaudiofile and Audio File Library 0.3.6 allows remote attackers to have unspecified impact via a crafted WAV file...

CVE-2017-6828

CVE-2017-6828 affects audiofile (libaudiofile) 0.3.6 with a heap-based overflow in readValue(FileHandle.cpp) triggered by a crafted WAV file. The CVE entry notes unspecified impact; related advisories and Debian/MPL/Mageia notes indicate exposure could lead to denial of service or arbitrary code ...

CVE-2017-6828

Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile aka libaudiofile and Audio File Library 0.3.6 allows remote attackers to have unspecified impact via a crafted WAV file...

CVE-2017-6827

Heap-based buffer overflow in the MSADPCM::initializeCoefficients function in MSADPCM.cpp in audiofile aka libaudiofile and Audio File Library 0.3.6 allows remote attackers to have unspecified impact via a crafted audio file...

CVE-2017-6827

CVE-2017-6827 is a heap-based buffer overflow in the MSADPCM::initializeCoefficients function of audiofile (libaudiofile) 0.3.6, allowing remote attackers to impact via a crafted audio file. Connected advisories confirm this vulnerability across multiple distributions: Debian DSA-3814 fixed in 0....

CVE-2017-6827: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the MSADPCM::initializeCoefficients function in MSADPCM.cpp in audiofile aka libaudiofile and Audio File Library 0.3.6 allows remote attackers to have unspecified impact via a crafted audio file...

CVE-2017-6828: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile aka libaudiofile and Audio File Library 0.3.6 allows remote attackers to have unspecified impact via a crafted WAV file...

UBUNTU-CVE-2017-6828

Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile aka libaudiofile and Audio File Library 0.3.6 allows remote attackers to have unspecified impact via a crafted WAV file...

CVE-2017-6828

Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile aka libaudiofile and Audio File Library 0.3.6 allows remote attackers to have unspecified impact via a crafted WAV file...

CVE-2017-6827

Heap-based buffer overflow in the MSADPCM::initializeCoefficients function in MSADPCM.cpp in audiofile aka libaudiofile and Audio File Library 0.3.6 allows remote attackers to have unspecified impact via a crafted audio file...

UBUNTU-CVE-2017-6836

Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 allows remote attackers to cause a denial of service crash via a crafted file...

UBUNTU-CVE-2017-6835

The reset1 function in libaudiofile/modules/BlockCodec.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service divide-by-zero error and crash via a crafted file...

CVE-2017-6832

Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service crash via a crafted file...

UBUNTU-CVE-2017-6829

The decodeSample function in IMA.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service crash via a crafted file...

Fedora 23 : audiofile-0.3.6-9.fc23 (2015-605cd28f33)

Security fix for CVE-2015-7747 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 22 : audiofile-0.3.6-9.fc22 (2015-4bc7688b3e)

Security fix for CVE-2015-7747 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora Update for audiofile FEDORA-2015-4

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2787-1 audiofile vulnerability | Cloud Foundry

USN-2787-1 audiofile vulnerability Medium Vendor audiofile Versions Affected Ubuntu 14.04 Description Fabrizio Gennari discovered that audiofile incorrectly handled changing both the sample format and the number of channels. If a user or automated system were tricked into processing a specially...

openSUSE Security Update : audiofile (openSUSE-2015-698)

audiofile was updated to fix one security issue. This security issue was fixed : - CVE-2015-7747: Overflow when changing both number of channels and sample format bsc949399. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...