Ubuntu: Security Advisory (USN-7267-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS : libsndfile vulnerability (USN-7267-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7267-1 advisory. It was discovered that libsndfile incorrectly handled certain malformed OggVorbis files. An attacker could possibly use this issue to cause libsndfile to crash,...

USN-7267-1 libsndfile vulnerability

It was discovered that libsndfile incorrectly handled certain malformed OggVorbis files. An attacker could possibly use this issue to cause libsndfile to crash, resulting in a denial of service...

USN-7267-1: libsndfile vulnerability

It was discovered that libsndfile incorrectly handled certain malformed OggVorbis files. An attacker could possibly use this issue to cause libsndfile to crash, resulting in a denial of service...

ROS-20250212-06

A vulnerability in the oggvorbis.c component of the libsndfile audio file reading and writing library is related to a boundary condition violation in the vorbisanalysiswrote function in oggvorbis.c. a boundary condition violation in the vorbisanalysiswrote function in oggvorbis.c. Exploitation of...

Azure Linux 3.0 Security Update: libsndfile (CVE-2022-33065)

The version of libsndfile installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-33065 advisory. - Multiple signed integers overflow in function aureadheader in src/au.c and in functions mat4open and...

Advisory ROSA-SA-2025-2574

software: libsndfile 1.1.0 OS: ROSA-CHROME packageevrstring: libsndfile-1.1.0-4 CVE-ID: CVE-2024-50612 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: Vulnerability in libsndfile library: read outside array in oggvorbis.c. CVE-STATUS: The vulnerability has been resolved CVE-REV: To close the...

AlmaLinux 9 : libsndfile:1.0.31 (ALSA-2024:11237)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:11237 advisory. libsndfile: Segmentation fault error in oggvorbis.c:417 vorbisanalysiswrote CVE-2024-50612 Tenable has extracted the preceding description block directly from the...

libsndfile:1.0.31 security update

1.0.31-8.2 - fix crash in ogg vorbis RHEL-65096 CVE-2024-50612...

Oracle Linux 9 : libsndfile:1.0.31 (ELSA-2024-11237)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-11237 advisory. 1.0.31-8.2 - fix crash in ogg vorbis RHEL-65096 CVE-2024-50612 Tenable has extracted the preceding description block directly from the Oracle Linux security...

RHSA-2024:11237 Red Hat Security Advisory: libsndfile:1.0.31 security update

Bulletin has no description...

RHSA-2024:11192 Red Hat Security Advisory: libsndfile security update

Bulletin has no description...

RHSA-2024:11172 Red Hat Security Advisory: libsndfile security update

Bulletin has no description...

RHEL 9 : libsndfile (RHSA-2024:11172)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:11172 advisory. libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fixes: libsndfile: Segmentation...

AlmaLinux 8 : libsndfile (ALSA-2024:11192)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:11192 advisory. libsndfile: Segmentation fault error in oggvorbis.c:417 vorbisanalysiswrote CVE-2024-50612 Tenable has extracted the preceding description block directly from the...

RHEL 9 : libsndfile:1.0.31 (RHSA-2024:11237)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:11237 advisory. libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fixes: libsndfile: Segmentation...

RHEL 8 : libsndfile (RHSA-2024:11192)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:11192 advisory. libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fixes: libsndfile: Segmentation...

Oracle Linux 8 : libsndfile (ELSA-2024-11192)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-11192 advisory. 1.0.28-16 - fix prerequisit patch RHEL-65093 1.0.28-15 - fix crash in ogg vorbis RHEL-65093 CVE-2024-50612 Tenable has extracted the preceding description bloc...

libsndfile: Segmentation fault error in ogg_vorbis.c:417 vorbis_analysis_wrote()

A flaw was found in the libsndfile package. A specially crafted input file may trigger an out-of-bounds read, leading to memory corruption and a denial of service...

Moderate: Red Hat Security Advisory: libsndfile:1.0.31 security update

An update for the libsndfile:1.0.31 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...