SUSE-SU-2019:14008-1 Security update for libsndfile

This update for libsndfile fixes the following issues: Security issues fixed: - CVE-2017-17456: Prevent segmentation fault in the function d2alawarray that may have lead to a remote DoS bsc1071777. - CVE-2017-17457: Prevent segmentation fault in the function d2ulawarray that may have lead to a...

openSUSE Security Update : libsndfile (openSUSE-2019-562)

This update for libsndfile fixes the following issues : Security issues fixed : - CVE-2018-13139: Fix a stack-based buffer overflow in psfmemset in common.c that allows remote attackers to cause a denial of service bsc1100167. - CVE-2017-17456: Prevent segmentation fault in the function d2alawarr...

ALPINE-CVE-2019-3832

It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...

CVE-2019-3832

It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...

DEBIAN-CVE-2019-3832

It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...

Design/Logic Flaw

It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...

CVE-2019-3832

It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...

UBUNTU-CVE-2019-3832

It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...

CVE-2019-3832

CVE-2019-3832 affects libsndfile (example: 1.0.28-14 in Mariner/Debian). The issue is a read past buffer limits in wav_write_header() due to an incomplete fix for CVE-2018-19758, enabling a local crash. Connected sources consistently reference libsndfile and note that upgrading to a newer libsndf...

CVE-2019-3832

It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...

CVE-2019-3832

It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...

libsndfile out-of-bounds read vulnerability (CNVD-2019-07249)

libsndfile is an AC library for reading and writing sound files containing sampled audio data. An out-of-bounds read vulnerability exists in the 'wavwriteheader' function of the wav.c file in libsndfile, which can be exploited by an attacker to cause a denial of service or obtain sensitive...

Debian DLA-1712-1 : libsndfile security update

It was found that the fix for CVE-2018-19758 was incomplete. That has been addressed in this update. The description for CVE-2018-19758 follows : A heap-buffer-overflow vulnerability was discovered in libsndfile, the library for reading and writing files containing sampled sound. This flaw might ...

[SECURITY] [DLA 1712-1] libsndfile security update

Package : libsndfile Version : 1.0.25-9.1+deb8u4 CVE ID : CVE-2019-3832 It was found that the fix for CVE-2018-19758 was incomplete. That has been addressed in this update. The description for CVE-2018-19758 follows: A heap-buffer-overflow vulnerability was discovered in libsndfile, the library f...

DLA-1712-1 libsndfile - security update

Bulletin has no description...

EulerOS 2.0 SP5 : libsndfile (EulerOS-SA-2019-1030)

According to the version of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A stack-based buffer overflow in psfmemset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service application cra...

PT-2019-5891 · Unknown +2 · Libsndfile +2

Name of the Vulnerable Software and Affected Versions: Libsndfile affected versions not specified Description: The issue is related to a read beyond the limits of a buffer in the wav write header function in wav.c. This can be exploited by a local attacker to make the application crash, resulting...

EulerOS 2.0 SP3 : libsndfile (EulerOS-SA-2019-1029)

According to the versions of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A stack-based buffer overflow in psfmemset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service application...

libsndfile -- out-of-bounds read memory access

RedHat reports: It was discovered the fix for CVE-2018-19758 was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...

Debian DLA-1632-1 : libsndfile security update

A heap-buffer-overflow vulnerability was discovered in libsndfile, the library for reading and writing files containing sampled sound. This flaw might be triggered by remote attackers to cause denial of service out of bounds read and application crash. For Debian 8 'Jessie', this problem has been...