Lucene search
+L

339 matches found

securityvulns
securityvulns
•added 2015/11/02 12:00 a.m.•452 views

[USN-2787-1] audiofile vulnerability

========================================================================== Ubuntu Security Notice USN-2787-1 October 28, 2015 audiofile vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

0.6AI score0.08802EPSS
SaveExploits0
Fedora
Fedora
•added 2015/11/01 3:26 a.m.•40 views

[SECURITY] Fedora 23 Update: audiofile-0.3.6-9.fc23

The Audio File library is an implementation of the Audio File Library from SGI, which provides an API for accessing audio file formats like AIFF/AIFF-C, WAVE, and NeXT/Sun .snd/.au files. This library is used by the EsounD daemon. Install audiofile if you are installing EsounD or you need an API...

8.8CVSS1.8AI score0.08802EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2015/10/29 12:00 a.m.•45 views

Ubuntu 14.04 LTS : audiofile vulnerability (USN-2787-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2787-1 advisory. Fabrizio Gennari discovered that audiofile incorrectly handled changing both the sample format and the number of channels. If a user or automated system were...

8.8CVSS7.9AI score0.08802EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2015/10/29 12:00 a.m.•29 views

Ubuntu: Security Advisory (USN-2787-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.08802EPSS
SaveExploits0References2
Ubuntu
Ubuntu
•added 2015/10/28 7:39 p.m.•58 views

USN-2787-1: audiofile vulnerability

Fabrizio Gennari discovered that audiofile incorrectly handled changing both the sample format and the number of channels. If a user or automated system were tricked into processing a specially crafted file, audiofile could be made to crash, leading to a denial of service, or possibly execute...

8.8CVSS7.4AI score0.08802EPSS
SaveExploits0
OSV
OSV
•added 2015/10/28 7:39 p.m.•14 views

USN-2787-1 audiofile vulnerability

Fabrizio Gennari discovered that audiofile incorrectly handled changing both the sample format and the number of channels. If a user or automated system were tricked into processing a specially crafted file, audiofile could be made to crash, leading to a denial of service, or possibly execute...

8.8CVSS7.1AI score0.08802EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2015/10/26 12:00 a.m.•36 views

Mageia: Security Advisory (MGASA-2015-0408)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.08802EPSS
SaveExploits0References4
Mageia
Mageia
•added 2015/10/25 2:38 p.m.•40 views

Updated audiofile packages fixes security vulnerability

When libaudiofile is used to change both the number of channels of an audio file e.g. from stereo to mono and the sample format e.g. from 16-bit samples to 8-bit samples, the output file will contain corrupted data. If the new sample format is smaller than the old one, there is a risk of buffer...

8.8CVSS8.6AI score0.08802EPSS
SaveExploits0References2
OSV
OSV
•added 2015/10/25 2:38 p.m.•12 views

MGASA-2015-0408 Updated audiofile packages fixes security vulnerability

When libaudiofile is used to change both the number of channels of an audio file e.g. from stereo to mono and the sample format e.g. from 16-bit samples to 8-bit samples, the output file will contain corrupted data. If the new sample format is smaller than the old one, there is a risk of buffer...

8.8CVSS8.7AI score0.08802EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2015/10/09 12:00 a.m.•31 views

CVE-2015-7747

Buffer overflow in the afReadFrames function in audiofile aka libaudiofile and Audio File Library allows user-assisted remote attackers to cause a denial of service program crash or possibly execute arbitrary code via a crafted audio file, as demonstrated by sixteen-stereo-to-eight-mono.c...

8.8CVSS7.5AI score0.08802EPSS
SaveExploits0References3
OSV
OSV
•added 2015/10/09 12:00 a.m.•11 views

UBUNTU-CVE-2015-7747

Buffer overflow in the afReadFrames function in audiofile aka libaudiofile and Audio File Library allows user-assisted remote attackers to cause a denial of service program crash or possibly execute arbitrary code via a crafted audio file, as demonstrated by sixteen-stereo-to-eight-mono.c...

8.8CVSS7.5AI score0.08802EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2014/09/04 12:00 a.m.•8 views

PT-2015-7592 · Audiofile +3 · Audiofile +3

Name of the Vulnerable Software and Affected Versions: audiofile affected versions not specified Description: The issue is related to a buffer overflow in the afReadFrames function, which can be exploited by user-assisted remote attackers. This can lead to a denial of service, causing the program...

8.8CVSS7.3AI score0.08802EPSS
SaveExploits2References68
Tenable Nessus
Tenable Nessus
•added 2011/12/13 12:00 a.m.•20 views

SuSE 10 Security Update : audiofile (ZYPP Patch Number 7394)

A heap-overflow in libaudiofile was fixed. The overflow existsed in the WAV processing code and can be exploited to execute arbitrary code. This update also contains fixed audiofile-32bit packages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novel...

6.8CVSS8.1AI score0.0602EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2011/03/31 12:00 a.m.•23 views

SuSE 10 Security Update : audiofile (ZYPP Patch Number 7315)

A heap-overflow in libaudiofile was fixed. The overflow existsed in the WAV processing code and can be exploited to execute arbitrary code. This update also contains fixed audiofile-32bit packages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novel...

6.8CVSS8.1AI score0.0602EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2010/03/22 12:00 a.m.•20 views

Ubuntu: Security Advisory (USN-912-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS7.6AI score0.0602EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2010/03/22 12:00 a.m.•29 views

Ubuntu Update for audiofile vulnerability USN-912-1

Ubuntu Update for Linux kernel vulnerabilities USN-912-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9121.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for audiofile vulnerability USN-912-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

6.8CVSS0.3AI score0.0602EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2010/03/17 12:00 a.m.•20 views

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 / 9.10 : audiofile vulnerability (USN-912-1)

It was discovered that Audio File Library contained a heap-based buffer overflow. If a user or automated system processed a crafted WAV file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program...

6.8CVSS8.3AI score0.0602EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2010/02/24 12:00 a.m.•29 views

Debian DSA-1972-1 : audiofile - buffer overflow

Max Kellermann discovered a heap-based buffer overflow in the handling of ADPCM WAV files in libaudiofile. This flaw could result in a denial of service application crash or possibly execution of arbitrary code via a crafted WAV file. The old stable distribution etch, this problem will be fixed i...

6.8CVSS8.4AI score0.0602EPSS
SaveExploits1References3
Debian
Debian
•added 2010/01/21 4:07 p.m.•65 views

[SECURITY] [DSA-1972-2] New audiofile packages fix buffer overflow

------------------------------------------------------------------------- Debian Security Advisory DSA-1972-2 [email protected] http://www.debian.org/security/ Stefan Fritsch January 21, 2010 http://www.debian.org/security/faq -...

6.8CVSS7AI score0.0602EPSS
SaveExploits1
Debian
Debian
•added 2010/01/21 4:07 p.m.•50 views

[SECURITY] [DSA-1972-2] New audiofile packages fix buffer overflow

------------------------------------------------------------------------- Debian Security Advisory DSA-1972-2 [email protected] http://www.debian.org/security/ Stefan Fritsch January 21, 2010 http://www.debian.org/security/faq -...

6.8CVSS0.0602EPSS
SaveExploits1
Rows per page
Query Builder