MGASA-2023-0310 Updated libsndfile packages fix a security vulnerability

Add upstream patch to fix CVE-2022-33065...

Updated libsndfile packages fix a security vulnerability

Add upstream patch to fix CVE-2022-33065...

Rocky Linux 8 : libsndfile (RLSA-2020:1636)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2020:1636 advisory. - A stack-based buffer overflow in psfmemset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service application crash or...

Rocky Linux 8 : libsndfile (RLSA-2022:1968)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:1968 advisory. - An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a specially crafted file via tricking a user t...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : libsndfile vulnerability (USN-6471-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6471-1 advisory. It was discovered that libsndfile contained multiple arithmetic overflows. If a user or automated system were...

Ubuntu: Security Advisory (USN-6471-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6471-1 libsndfile vulnerability

It was discovered that libsndfile contained multiple arithmetic overflows. If a user or automated system were tricked into processing a specially crafted audio file, an attacker could possibly use this issue to cause a denial of service...

SUSE SLES12 Security Update : libsndfile (SUSE-SU-2023:4331-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4331-1 advisory. - CVE-2022-33065: Fixed an integer overflow that could cause memory safety issues when reading a MAT4 file bsc1213451. Tenable has extracted...

SUSE SLED15: libsndfile-devel / libsndfile-progs / libsndfile1 / etc (SUSE-SU-2023:4330-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4330-1 advisory. - CVE-2022-33065: Fixed an integer overflow that could cause memory safety issues when reading a MAT4 fil...

SUSE-SU-2023:4331-1 Security update for libsndfile

This update for libsndfile fixes the following issues: - CVE-2022-33065: Fixed an integer overflow that could cause memory safety issues when reading a MAT4 file bsc1213451...

SUSE-SU-2023:4330-1 Security update for libsndfile

This update for libsndfile fixes the following issues: - CVE-2022-33065: Fixed an integer overflow that could cause memory safety issues when reading a MAT4 file bsc1213451...

SUSE: Security Advisory (SUSE-SU-2023:4331-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:4330-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-202309-11 : libsndfile: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202309-11 libsndfile: Multiple Vulnerabilities - A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file. CVE-2021-3246 - An out-of-bounds...

libsndfile: Multiple Vulnerabilities

Background libsndfile is a C library for reading and writing files containing sampled sound. Description Multiple vulnerabilities have been discovered in libsndfile. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...

CVE-2022-33064

Libsndfile could allow a remote attacker to execute arbitrary code on the system, caused by an off-by-one error in function wavreadheader in src/wav.c...

CVE-2022-33065

Libsndfile is vulnerable to integer overflow in function aureadheader in src/au.c and in functions mat4open and mat4readheader in src/mat4.c allows an attacker to cause Denial of Service...

Oracle Linux 7 : libsndfile (ELSA-2020-1185)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1185 advisory. 1.0.25-11 - fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility 1598577 Tenable has extracted the preceding description block...

Oracle Linux 8 : libsndfile (ELSA-2020-1636)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-1636 advisory. - fix CVE-2018-19661 and CVE-2018-19662 - buffer over-read in the function i2alawarray in alaw 1673085 Tenable has extracted the preceding description...

SUSE CVE-2022-33065

Multiple signed integers overflow in function aureadheader in src/au.c and in functions mat4open and mat4readheader in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts...