SUSE SLES11 Security Update : libsndfile (SUSE-SU-2019:14008-1)

This update for libsndfile fixes the following issues : Security issues fixed : CVE-2017-17456: Prevent segmentation fault in the function d2alawarray that may have lead to a remote DoS bsc1071777. CVE-2017-17457: Prevent segmentation fault in the function d2ulawarray that may have lead to a remo...

SUSE-SU-2019:14008-1 Security update for libsndfile

This update for libsndfile fixes the following issues: Security issues fixed: - CVE-2017-17456: Prevent segmentation fault in the function d2alawarray that may have lead to a remote DoS bsc1071777. - CVE-2017-17457: Prevent segmentation fault in the function d2ulawarray that may have lead to a...

openSUSE Security Update : libsndfile (openSUSE-2019-562)

This update for libsndfile fixes the following issues : Security issues fixed : - CVE-2018-13139: Fix a stack-based buffer overflow in psfmemset in common.c that allows remote attackers to cause a denial of service bsc1100167. - CVE-2017-17456: Prevent segmentation fault in the function d2alawarr...

ALPINE-CVE-2019-3832

It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...

DEBIAN-CVE-2019-3832

It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...

CVE-2019-3832

It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...

Design/Logic Flaw

It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...

CVE-2019-3832

It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...

UBUNTU-CVE-2019-3832

It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...

CVE-2019-3832

It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...

CVE-2019-3832

CVE-2019-3832 affects libsndfile (example: 1.0.28-14 in Mariner/Debian). The issue is a read past buffer limits in wav_write_header() due to an incomplete fix for CVE-2018-19758, enabling a local crash. Connected sources consistently reference libsndfile and note that upgrading to a newer libsndf...

CVE-2019-3832

It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...

libsndfile out-of-bounds read vulnerability (CNVD-2019-07249)

libsndfile is an AC library for reading and writing sound files containing sampled audio data. An out-of-bounds read vulnerability exists in the 'wavwriteheader' function of the wav.c file in libsndfile, which can be exploited by an attacker to cause a denial of service or obtain sensitive...

Debian DLA-1712-1 : libsndfile security update

It was found that the fix for CVE-2018-19758 was incomplete. That has been addressed in this update. The description for CVE-2018-19758 follows : A heap-buffer-overflow vulnerability was discovered in libsndfile, the library for reading and writing files containing sampled sound. This flaw might ...

[SECURITY] [DLA 1712-1] libsndfile security update

Package : libsndfile Version : 1.0.25-9.1+deb8u4 CVE ID : CVE-2019-3832 It was found that the fix for CVE-2018-19758 was incomplete. That has been addressed in this update. The description for CVE-2018-19758 follows: A heap-buffer-overflow vulnerability was discovered in libsndfile, the library f...

DLA-1712-1 libsndfile - security update

Bulletin has no description...

EulerOS 2.0 SP5 : libsndfile (EulerOS-SA-2019-1030)

According to the version of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A stack-based buffer overflow in psfmemset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service application cra...

PT-2019-5891 · Unknown +2 · Libsndfile +2

Name of the Vulnerable Software and Affected Versions: Libsndfile affected versions not specified Description: The issue is related to a read beyond the limits of a buffer in the wav write header function in wav.c. This can be exploited by a local attacker to make the application crash, resulting...

EulerOS 2.0 SP3 : libsndfile (EulerOS-SA-2019-1029)

According to the versions of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A stack-based buffer overflow in psfmemset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service application...

libsndfile -- out-of-bounds read memory access

RedHat reports: It was discovered the fix for CVE-2018-19758 was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...