RHSA-2020:3922 Red Hat Security Advisory: libsndfile security update

Bulletin has no description...

RHSA-2020:1636 Red Hat Security Advisory: libsndfile security update

Bulletin has no description...

RHSA-2020:1185 Red Hat Security Advisory: libsndfile security update

Bulletin has no description...

RHSA-2011:1084 Red Hat Security Advisory: libsndfile security update

Bulletin has no description...

CBL Mariner 2.0 Security Update: libsndfile (CVE-2022-33065)

The version of libsndfile installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-33065 advisory. - Multiple signed integers overflow in function aureadheader in src/au.c and in functions mat4open and...

Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile allows an attacker to cause Denial of Service or other unspecified impacts.

...

CVE-2022-33065 affecting package libsndfile for versions less than 1.0.31-3

CVE-2022-33065 affecting package libsndfile for versions less than 1.0.31-3. A patched version of the package is available...

CVE-2022-33065 affecting package libsndfile for versions less than 1.2.2-2

CVE-2022-33065 affecting package libsndfile for versions less than 1.2.2-2. A patched version of the package is available...

Medium: libsndfile

Issue Overview: Multiple signed integers overflow in function aureadheader in src/au.c and in functions mat4open and mat4readheader in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts. CVE-2022-33065 Affected Packages: libsndfile Issue Correctio...

Medium: libsndfile

Issue Overview: Multiple signed integers overflow in function aureadheader in src/au.c and in functions mat4open and mat4readheader in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts. CVE-2022-33065 Affected Packages: libsndfile Issue Correctio...

Amazon Linux 2023 : libsndfile, libsndfile-devel, libsndfile-utils (ALAS2023-2024-701)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-701 advisory. Multiple signed integers overflow in function aureadheader in src/au.c and in functions mat4open and mat4readheader in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other...

An off-by-one error in function wav_read_header in src/wav.c in Libsndfile 1.1.0 results in a write out of bound which allows an attacker to execute arbitrary code Denial of Service or other unspecified impacts.

...

OPENSUSE-SU-2024:10148-1 libsndfile-devel-1.0.26-2.4 on GA media

These are all security issues fixed in the libsndfile-devel-1.0.26-2.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11705-1 libsndfile-devel-1.0.31-3.1 on GA media

These are all security issues fixed in the libsndfile-devel-1.0.31-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10470-1 libsndfile-progs-1.0.26-2.4 on GA media

These are all security issues fixed in the libsndfile-progs-1.0.26-2.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13348-1 libsndfile-devel-1.2.2-1.1 on GA media

These are all security issues fixed in the libsndfile-devel-1.2.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10992-1 libsndfile-devel-1.0.31-2.2 on GA media

These are all security issues fixed in the libsndfile-devel-1.0.31-2.2 package on the GA media of openSUSE Tumbleweed...

RHEL 6 : libsndfile (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libsndfile: Heap overflow vulnerability when parsing specially crafted AIFF header CVE-2015-7805 -...

RHEL 7 : libsndfile (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libsndfile: Heap overflow vulnerability when parsing specially crafted AIFF header CVE-2015-7805 -...

RHEL 8 : libsndfile (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libsndfile: heap-based buffer over-read at wav.c in wavwriteheader CVE-2018-19758 - An issue was discover...