USN-3306-1: libsndfile vulnerabilities

Agostino Sarubbo and Jakub Jirasek discovered that libsndfile incorrectly handled certain malformed files. A remote attacker could use this issue to cause libsndfile to crash, resulting in a denial of service, or possibly execute arbitrary code...

USN-3306-1 libsndfile vulnerabilities

Agostino Sarubbo and Jakub Jirasek discovered that libsndfile incorrectly handled certain malformed files. A remote attacker could use this issue to cause libsndfile to crash, resulting in a denial of service, or possibly execute arbitrary code...

Debian DLA-956-1 : libsndfile security update

CVE-2017-8361 The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted audio file. CVE-2017-8362 The flacbuffercopy function in flac.c in libsndfile...

openSUSE Security Update : libsndfile (openSUSE-2017-625)

This update for libsndfile fixes the following issues : - CVE-2017-8361: Global buffer overflow in flacbuffercopy. bsc1036946 - CVE-2017-8362: Invalid memory read in flacbuffercopy. bsc1036943 - CVE-2017-8363: Heap-based buffer overflow in flacbuffercopy. bsc1036945 - CVE-2017-7585, CVE-2017-7741...

[SECURITY] [DLA 956-1] libsndfile security update

Package : libsndfile Version : 1.0.25-9.1+deb7u2 CVE ID : CVE-2017-8361 CVE-2017-8362 CVE-2017-8363 CVE-2017-8365 CVE-2017-8361 The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have...

DLA-956-1 libsndfile - security update

Bulletin has no description...

SUSE SLED12 / SLES12 Security Update : libsndfile (SUSE-SU-2017:1367-1)

This update for libsndfile fixes the following issues : - CVE-2017-8361: Global buffer overflow in flacbuffercopy. bsc1036946 - CVE-2017-8362: Invalid memory read in flacbuffercopy. bsc1036943 - CVE-2017-8363: Heap-based buffer overflow in flacbuffercopy. bsc1036945 - CVE-2017-7585, CVE-2017-7741...

libsndfile -- out-of-bounds read memory access

Laurent Delosieres, Secunia Research at Flexera Software reports: Secunia Research has discovered a vulnerability in libsndfile, which can be exploited by malicious people to disclose potentially sensitive information. The vulnerability is caused due to an error in the "aiffreadchanmap" function...

SUSE-SU-2017:1367-1 Security update for libsndfile

This update for libsndfile fixes the following issues: - CVE-2017-8361: Global buffer overflow in flacbuffercopy. bsc1036946 - CVE-2017-8362: Invalid memory read in flacbuffercopy. bsc1036943 - CVE-2017-8363: Heap-based buffer overflow in flacbuffercopy. bsc1036945 - CVE-2017-7585, CVE-2017-7741,...

SUSE SLES11 Security Update : libsndfile (SUSE-SU-2017:1236-1)

This update for libsndfile fixes the following issues : - CVE-2017-8362: invalid memory read in flacbuffercopy flac.c bsc1036943 - CVE-2017-8365: global buffer overflow in i2lesarray pcm.c bsc1036946 - CVE-2017-8361: global buffer overflow in flacbuffercopy flac.c bsc1036944 - CVE-2017-8363:...

SUSE-SU-2017:1236-1 Security update for libsndfile

This update for libsndfile fixes the following issues: - CVE-2017-8362: invalid memory read in flacbuffercopy flac.c bsc1036943 - CVE-2017-8365: global buffer overflow in i2lesarray pcm.c bsc1036946 - CVE-2017-8361: global buffer overflow in flacbuffercopy flac.c bsc1036944 - CVE-2017-8363:...

CVE-2017-8362

The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service invalid read and application crash via a crafted audio file...

CVE-2017-8361

The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted audio file...

CVE-2017-8365

The i2lesarray function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted audio file...

libsndfile buffer overflow vulnerability (CNVD-2017-07010)

libsndfile is a C library developed by software developer Erik de Castro Lopo that reads and writes audio files in AIFF, AU, and WAV formats through standard interfaces. A buffer overflow vulnerability exists in the i2lesarray function of the pcm.c file in version 1.0.28 of libsndfile. A remote...

libsndfile Denial of Service Vulnerability

libsndfile is a C library developed by software developer Erik de Castro Lopo that reads and writes audio files in AIFF, AU, and WAV formats through standard interfaces. A denial of service vulnerability exists in the flacbuffercopy function of the flac.c file in version 1.0.28 of libsndfile. A...

libsndfile Buffer Overflow Vulnerability

libsndfile is a C library developed by software developer Erik de Castro Lopo that reads and writes audio files in AIFF, AU, and WAV formats through standard interfaces. A buffer overflow vulnerability exists in the flacbuffercopy function of the flac.c file in libsndfile version 1.0.28. A remote...

libsndfile buffer overflow vulnerability (CNVD-2017-07022)

libsndfile is a C library developed by software developer Erik de Castro Lopo that reads and writes audio files in AIFF, AU, and WAV formats through standard interfaces. A buffer overflow vulnerability in the flacbuffercopy function in the flac.c file in version 1.0.28 of libsndfile. A remote...

Debian DLA-928-1 : libsndfile security update

Multiple vulnerabilities were found in libsndfile, a popular library for reading/writing audio files. CVE-2017-7585 In libsndfile before 1.0.28, an error in the 'flacbuffercopy' function flac.c can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file. CVE-2017-758...

CVE-2017-8361

The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted audio file...