NewStart CGSL CORE 5.05 / MAIN 5.05 : libsndfile Vulnerability (NS-SA-2020-0107)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has libsndfile packages installed that are affected by a vulnerability: - A stack-based buffer overflow in psfmemset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service application crash or...

EulerOS Virtualization 3.0.6.6 : libsndfile (EulerOS-SA-2020-2469)

According to the version of the libsndfile package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in...

Huawei EulerOS: Security Advisory for libsndfile (EulerOS-SA-2020-2469)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : libsndfile (EulerOS-SA-2020-2254)

According to the version of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader...

Debian DLA-2418-1 : libsndfile security update

Several issues have been found in libsndfile, a library for reading/writing audio files. All issues are basically divide by zero errors, heap read overflows or other buffer overlow errors. For Debian 9 stretch, these problems have been fixed in version 1.0.27-3+deb9u1. We recommend that you upgra...

Debian: Security Advisory (DLA-2418-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libsndfile (EulerOS-SA-2020-2254)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2418-1] libsndfile security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2418-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz October 29, 2020 https://wiki.debian.org/LTS -...

DLA-2418-1 libsndfile - security update

Bulletin has no description...

Amazon Linux 2 : libsndfile (ALAS-2020-1529)

The version of libsndfile installed on the remote host is prior to 1.0.25-12. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1529 advisory. An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alawarray in alaw.c that will lead...

Low: libsndfile

Issue Overview: An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alawarray in alaw.c that will lead to a denial of service. CVE-2018-19662 Affected Packages: libsndfile Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this F...

Scientific Linux Security Update : libsndfile on SL7.x x86_64 (20201001)

Security Fixes : - libsndfile: buffer over-read in the function i2alawarray in alaw.c CVE-2018-19662 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141650; scriptversion"1.3";...

libsndfile security update

CentOS Errata and Security Advisory CESA-2020:3922 An update for libsndfile is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CentOS 7 : libsndfile (RHSA-2020:3922)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3922 advisory. - An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alawarray in alaw.c that will lead to a denial of service...

libsndfile:sndfile_fuzzer: Crash in _fini

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=5927490457174016 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilefuzzer Job Type: libfuzzermsanlibsndfile Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

The vulnerability of the sf_write_int function in the libsndfile library, which allows a hacker to cause a service failure.

The vulnerability of the sfwriteint function in the libsndfile library is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Oracle Linux 7 : libsndfile (ELSA-2020-3922)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-3922 advisory. 1.0.25-12 - fix CVE-2018-19662 - buffer over-read in the function i2alawarray 1673086 Tenable has extracted the preceding description block directly from the...

libsndfile security update

1.0.25-12 - fix CVE-2018-19662 - buffer over-read in the function i2alawarray 1673086...

RHEL 7 : libsndfile (RHSA-2020:3922)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3922 advisory. libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fixes: libsndfile: buffer...

Low: Red Hat Security Advisory: libsndfile security update

An update for libsndfile is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...