Fedora: Security Advisory (FEDORA-2023-47d4f575a3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 39 : audiofile (2023-47d4f575a3)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-47d4f575a3 advisory. Patch for CVE-2022-24599 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

Fedora 38 : audiofile (2023-07669abb35)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-07669abb35 advisory. Patch for CVE-2022-24599 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

Fedora 37 : audiofile (2023-e23e432cb2)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-e23e432cb2 advisory. Patch for CVE-2022-24599 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

Debian: Security Advisory (DLA-3650-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3650-1] audiofile security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3650-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès November 12, 2023 https://wiki.debian.org/LTS -...

DLA-3650-1 audiofile - security update

Bulletin has no description...

Debian dla-3650 : audiofile-tools - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3650 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3650-1 [email protected]...

Oracle Linux 7 : audiofile (ELSA-2020-3877)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3877 advisory. - Apply security patches. CVE-2018-17095, CVE-2018-13440 - Merge upstream pull requests 42,43,44 from Agostino Sarubbo to fix security issues...

CVE-2020-18781

A vulnerability was found in audiofile, where heap buffer overflow vulnerability was discovered in FilePOSIX::read in File.cpp leads to denial of service via a crafted wav file, this bug can be triggered by the executable sfconvert...

SUSE CVE-2020-18781

Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert...

AZL-28072 CVE-2020-18781 affecting package audiofile 0.3.6-27

Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert...

AZL-36932 CVE-2020-18781 affecting package audiofile 0.3.6-27

Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert...

DEBIAN-CVE-2020-18781

Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert...

UBUNTU-CVE-2020-18781

Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert...

AudioFile 缓冲区错误漏洞

AudioFile is a simple header-only C++ library from Adam Stark's personal developer in the UK. It is used to read and write audio files. A security vulnerability exists in AudioFile version 0.3.6, which stems from a buffer overflow vulnerability in the FilePOSIX::read function. An attacker could...

CVE-2020-18781

The CVE-2020-18781 issue affects audiofile 0.3.6 in Amazon Linux 2. The root cause is a heap buffer overflow in FilePOSIX::read (File.cpp) that can be triggered by a crafted WAV file via sfconvert, leading to denial of service. Amazon Linux 2 ALAS-2024-2601 maps this to audiofile 0.3.6-9 and list...

PT-2023-11508 · Audiofile · Audiofile

Name of the Vulnerable Software and Affected Versions: audiofile version 0.3.6 Description: The issue is related to a heap buffer overflow vulnerability in the FilePOSIX::read function in File.cpp. This can cause a denial-of-service when a crafted wav file is used, and the bug can be triggered by...

Amazon Linux 2 : audiofile (ALAS-2023-1997)

The version of audiofile installed on the remote host is prior to 0.3.6-10. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-1997 advisory. In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows ...

Medium: audiofile

Issue Overview: In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn...