Lucene search
+L

1682 matches found

Tenable Nessus
Tenable Nessus
•added 2018/03/02 12:00 a.m.•24 views

FreeBSD : libsndfile -- multiple vulnerabilities (2b386075-1d9c-11e8-b6aa-4ccc6adda413)

Agostino Sarubbo, Gentoo reports : CVE-2017-8361 Medium: The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted audio file. CVE-2017-8362 Medium:...

9.8CVSS6.8AI score0.03978EPSS
SaveExploits0References24
Tenable Nessus
Tenable Nessus
•added 2018/03/01 12:00 a.m.•30 views

FreeBSD : libsndfile -- out-of-bounds read memory access (004debf9-1d16-11e8-b6aa-4ccc6adda413)

Laurent Delosieres, Secunia Research at Flexera Software reports : Secunia Research has discovered a vulnerability in libsndfile, which can be exploited by malicious people to disclose potentially sensitive information. The vulnerability is caused due to an error in the 'aiffreadchanmap' function...

8.8CVSS7.6AI score0.02485EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2018/02/08 12:00 a.m.•39 views

openSUSE Security Update : libsndfile (openSUSE-2018-140)

This update for libsndfile fixes the following issues : - CVE-2017-16942: Divide-by-zero in the function wavw64readfmtchunk, which may lead to Denial of service bsc1069874. - CVE-2017-6892: Fixed an out-of-bounds read memory access in the aiffreadchanmap bsc1043978. - CVE-2017-14634: In libsndfil...

8.8CVSS6.3AI score0.02485EPSS
SaveExploits1References10
OpenVAS
OpenVAS
•added 2018/02/06 12:00 a.m.•35 views

Debian: Security Advisory (DLA-1049-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.4AI score0.03978EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2018/02/05 12:00 a.m.•32 views

SUSE SLES11 Security Update : Recommended update for libsndfile (SUSE-SU-2018:0351-1)

This update for libsndfile fixes a memory leak in an error path.bsc1038856 - CVE-2017-16942: A divide-by-zero error exists in the function wavw64readfmtchunk in wavw64.c, which may lead to DoS when playing a crafted audio file. bsc1069874 - CVE-2017-14634: In libsndfile 1.0.28, a divide-by-zero...

8.1CVSS6.4AI score0.02229EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
•added 2018/02/05 12:00 a.m.•40 views

SUSE SLED12 / SLES12 Security Update : libsndfile (SUSE-SU-2018:0352-1)

This update for libsndfile fixes the following issues : - CVE-2017-16942: Divide-by-zero in the function wavw64readfmtchunk, which may lead to Denial of service bsc1069874. - CVE-2017-6892: Fixed an out-of-bounds read memory access in the aiffreadchanmap bsc1043978. - CVE-2017-14634: In libsndfil...

8.8CVSS6.4AI score0.02485EPSS
SaveExploits1References16
osv_suse
osv_suse
•added 2018/02/02 11:33 a.m.•17 views

SUSE-SU-2018:0352-1 Security update for libsndfile

This update for libsndfile fixes the following issues: - CVE-2017-16942: Divide-by-zero in the function wavw64readfmtchunk, which may lead to Denial of service bsc1069874. - CVE-2017-6892: Fixed an out-of-bounds read memory access in the aiffreadchanmap bsc1043978. - CVE-2017-14634: In libsndfile...

8.8CVSS7AI score0.02485EPSS
SaveExploits1References11
osv_suse
osv_suse
•added 2018/02/02 11:32 a.m.•14 views

SUSE-SU-2018:0351-1 Recommended update for libsndfile

This update for libsndfile fixes a memory leak in an error path.bsc1038856 - CVE-2017-16942: A divide-by-zero error exists in the function wavw64readfmtchunk in wavw64.c, which may lead to DoS when playing a crafted audio file. bsc1069874 - CVE-2017-14634: In libsndfile 1.0.28, a divide-by-zero...

8.1CVSS6.9AI score0.02229EPSS
SaveExploits0References10
OpenVAS
OpenVAS
•added 2018/01/28 12:00 a.m.•28 views

Debian: Security Advisory (DLA-985-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.4AI score0.02485EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2018/01/24 12:00 a.m.•31 views

Debian: Security Advisory (DLA-956-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.9AI score0.03902EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2018/01/16 12:00 a.m.•69 views

Debian: Security Advisory (DLA-928-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.2AI score0.14271EPSS
SaveExploits6References3
BDU FSTEC
BDU FSTEC
•added 2018/01/12 12:00 a.m.•94 views

libsndfile Heap Buffer Overflow DoS

The vulnerability of the psfbinheaderwritef function in the common.c file of the libsndfile library in the Astra Linux operating system is related to a buffer overflow issue. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

9.8CVSS7.4AI score0.03978EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
•added 2018/01/12 12:00 a.m.•83 views

libsndfile Heap Buffer Overflow DoS

The vulnerability of the aiffreadchanmap function in the aaiff.c file of the libsndfile library relates to accessing beyond the buffer memory boundaries. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of...

8.8CVSS7.8AI score0.02485EPSS
SaveExploits1References8Affected Software3
CNVD
CNVD
•added 2017/12/07 12:00 a.m.•17 views

libsndfile Denial of Service Vulnerability (CNVD-2018-00218)

libsndfile is a C library developed by software developer Erik de Castro Lopo that reads and writes audio files in AIFF, AU, and WAV formats through standard interfaces. A security vulnerability exists in the 'd2alawarray' function of the alaw.c file in libsndfile version 1.0.29pre1. An attacker...

6.8AI score
SaveExploits0References1
CNVD
CNVD
•added 2017/12/07 12:00 a.m.•27 views

libsndfile Denial of Service Vulnerability (CNVD-2018-00219)

libsndfile is a C library developed by software developer Erik de Castro Lopo that reads and writes audio files in AIFF, AU, and WAV formats through standard interfaces. A security vulnerability exists in the 'd2ulawarray' function of the ulaw.c file in libsndfile version 1.0.29pre1. A remote...

6.8AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2017/11/27 4:52 p.m.•28 views

CVE-2017-16942

In libsndfile 1.0.25 fixed in 1.0.26, a divide-by-zero error exists in the function wavw64readfmtchunk in wavw64.c, which may lead to DoS when playing a crafted audio file...

6.5CVSS3.4AI score0.0123EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/11/27 12:00 a.m.•15 views

libsndfile denial of service vulnerability (CNVD-2017-38214)

libsndfile is a C library developed by software developer Erik de Castro Lopo that reads and writes audio files in AIFF, AU, and WAV formats through standard interfaces. A security vulnerability exists in the 'wavw64readfmtchunk' function of the wavw64.c file in libsndfile version 1.0.25. An...

6.5CVSS6.7AI score0.0123EPSS
SaveExploits0References1
NVD
NVD
•added 2017/11/25 5:29 p.m.•31 views

CVE-2017-16942

In libsndfile 1.0.25 fixed in 1.0.26, a divide-by-zero error exists in the function wavw64readfmtchunk in wavw64.c, which may lead to DoS when playing a crafted audio file...

6.5CVSS6.5AI score0.0123EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2017/11/25 5:29 p.m.•24 views

CVE-2017-16942

In libsndfile 1.0.25 fixed in 1.0.26, a divide-by-zero error exists in the function wavw64readfmtchunk in wavw64.c, which may lead to DoS when playing a crafted audio file...

6.5CVSS6.4AI score
SaveExploits0References2
osv_debian
osv_debian
•added 2017/11/25 5:29 p.m.•15 views

DEBIAN-CVE-2017-16942

In libsndfile 1.0.25 fixed in 1.0.26, a divide-by-zero error exists in the function wavw64readfmtchunk in wavw64.c, which may lead to DoS when playing a crafted audio file...

6.5CVSS6.8AI score0.0123EPSS
SaveExploits0References1
Rows per page
Query Builder