Lucene search
+L

1500 matches found

zdt
zdt
added 2017/06/14 12:00 a.m.120 views

libsndfile 1.0.28 aiff_read_chanmap() Information Disclosure Vulnerability

A vulnerability in libsndfile 1.0.28, caused due to an error in the"aiffreadchanmap" function src/aiff.c, can be exploited tocause an out-of-bounds read memory access via a specially crafted AIFFfile. libsndfile "aiffreadchanmap" Information Disclosure Vulnerability Table of Contents Affected...

6.8CVSS6.8AI score0.02485EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2017/06/13 12:00 a.m.31 views

Fedora Update for libsndfile FEDORA-2017-abbac6c64b

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.9AI score0.03902EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2017/06/13 12:00 a.m.26 views

Fedora 25 : libsndfile (2017-abbac6c64b)

fixes buffer overflows for flac and pcm Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

8.8CVSS7.4AI score0.03902EPSS
SaveExploits0References5
Fedora
Fedora
added 2017/06/12 9:42 p.m.27 views

[SECURITY] Fedora 25 Update: libsndfile-1.0.28-2.fc25

libsndfile is a C library for reading and writing sound files such as AIFF, AU, WAV, and others through one standard interface. It can currently read/write 8, 16, 24 and 32-bit PCM files as well as 32 and 64-bit floating point WAV files and a number of compressed formats. It compiles and runs on...

8.8CVSS2.3AI score0.03902EPSS
SaveExploits0
NVD
NVD
added 2017/06/12 4:29 p.m.12 views

CVE-2017-6892

In libsndfile version 1.0.28, an error in the "aiffreadchanmap" function aiff.c can be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file...

8.8CVSS8.3AI score0.02485EPSS
SaveExploits1References6
OSV
OSV
added 2017/06/12 4:29 p.m.25 views

CVE-2017-6892

In libsndfile version 1.0.28, an error in the "aiffreadchanmap" function aiff.c can be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file...

8.8CVSS6.4AI score
SaveExploits0References6
OSV
OSV
added 2017/06/12 4:29 p.m.6 views

DEBIAN-CVE-2017-6892

In libsndfile version 1.0.28, an error in the "aiffreadchanmap" function aiff.c can be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file...

8.8CVSS6.8AI score0.02485EPSS
SaveExploits1References1
Prion
Prion
added 2017/06/12 4:29 p.m.18 views

Out-of-bounds

In libsndfile version 1.0.28, an error in the "aiffreadchanmap" function aiff.c can be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file...

6.8CVSS8.1AI score0.02485EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
added 2017/06/12 4:00 p.m.45 views

CVE-2017-6892

In libsndfile version 1.0.28, an error in the "aiffreadchanmap" function aiff.c can be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file...

6.5AI score0.02485EPSS
SaveExploits1References6
CVE
CVE
added 2017/06/12 4:00 p.m.287 views

CVE-2017-6892

CVE-2017-6892 affects libsndfile 1.0.28, with an out-of-bounds read in aiff_read_chanmap() (aiff.c) triggered by a specially crafted AIFF file. Several advisories confirm a patched release is available; vendors (Debian, Gentoo, Mageia, Fedora, etc.) require upgrading libsndfile to include the fix...

8.8CVSS6.3AI score0.02485EPSS
SaveExploits1References6Affected Software1
Debian CVE
Debian CVE
added 2017/06/12 4:00 p.m.50 views

CVE-2017-6892

In libsndfile version 1.0.28, an error in the "aiffreadchanmap" function aiff.c can be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file...

8.8CVSS8.4AI score0.02485EPSS
SaveExploits1
Mageia
Mageia
added 2017/06/12 7:42 a.m.56 views

Updated libsndfile packages fix security vulnerabilities

A stack-based buffer overflow via a specially crafted FLAC file due to an error in the headerread function CVE-2017-7586. Several stack-based buffer overflows via a specially crafted FLAC file due to an error in the flacbuffercopy function CVE-2017-7585, CVE-2017-7741, CVE-2017-7742. Global buffe...

8.8CVSS4.5AI score0.03902EPSS
SaveExploits2References3
OSV
OSV
added 2017/06/12 7:42 a.m.11 views

MGASA-2017-0168 Updated libsndfile packages fix security vulnerabilities

A stack-based buffer overflow via a specially crafted FLAC file due to an error in the headerread function CVE-2017-7586. Several stack-based buffer overflows via a specially crafted FLAC file due to an error in the flacbuffercopy function CVE-2017-7585, CVE-2017-7741, CVE-2017-7742. Global buffe...

8.8CVSS6.1AI score0.03902EPSS
SaveExploits2References4
OSV
OSV
added 2017/06/12 12:00 a.m.7 views

UBUNTU-CVE-2017-6892

In libsndfile version 1.0.28, an error in the "aiffreadchanmap" function aiff.c can be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file...

8.8CVSS7.2AI score0.02485EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
added 2017/06/12 12:00 a.m.23 views

CVE-2017-6892

In libsndfile version 1.0.28, an error in the "aiffreadchanmap" function aiff.c can be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file...

8.8CVSS7.2AI score0.02485EPSS
SaveExploits1References5
Fedora
Fedora
added 2017/06/09 8:25 p.m.36 views

[SECURITY] Fedora 26 Update: libsndfile-1.0.28-2.fc26

libsndfile is a C library for reading and writing sound files such as AIFF, AU, WAV, and others through one standard interface. It can currently read/write 8, 16, 24 and 32-bit PCM files as well as 32 and 64-bit floating point WAV files and a number of compressed formats. It compiles and runs on...

8.8CVSS2.3AI score0.03902EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2017/06/02 12:00 a.m.34 views

Ubuntu: Security Advisory (USN-3306-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.8AI score0.03902EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2017/06/02 12:00 a.m.30 views

Ubuntu 14.04 LTS / 16.04 LTS : libsndfile vulnerabilities (USN-3306-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3306-1 advisory. Agostino Sarubbo and Jakub Jirasek discovered that libsndfile incorrectly handled certain malformed files. A remote attacker could use this...

8.8CVSS7AI score0.03902EPSS
SaveExploits2References9
OSV
OSV
added 2017/06/01 1:56 p.m.4 views

USN-3306-1 libsndfile vulnerabilities

Agostino Sarubbo and Jakub Jirasek discovered that libsndfile incorrectly handled certain malformed files. A remote attacker could use this issue to cause libsndfile to crash, resulting in a denial of service, or possibly execute arbitrary code...

8.8CVSS6.8AI score0.03902EPSS
SaveExploits2References9
Ubuntu
Ubuntu
added 2017/06/01 1:56 p.m.67 views

USN-3306-1: libsndfile vulnerabilities

Agostino Sarubbo and Jakub Jirasek discovered that libsndfile incorrectly handled certain malformed files. A remote attacker could use this issue to cause libsndfile to crash, resulting in a denial of service, or possibly execute arbitrary code...

8.8CVSS6.8AI score0.03902EPSS
SaveExploits2
Rows per page
Query Builder