CVE-2017-8362 affecting package libsndfile 1.0.28-14

CVE-2017-8362 affecting package libsndfile 1.0.28-14. An upgraded version of the package is available that resolves this issue...

CVE-2018-13419 affecting package libsndfile 1.0.28-14

CVE-2018-13419 affecting package libsndfile 1.0.28-14. An upgraded version of the package is available that resolves this issue...

CVE-2018-19662 affecting package libsndfile 1.0.28-14

CVE-2018-19662 affecting package libsndfile 1.0.28-14. An upgraded version of the package is available that resolves this issue...

CVE-2017-14245 affecting package libsndfile 1.0.28-14

CVE-2017-14245 affecting package libsndfile 1.0.28-14. An upgraded version of the package is available that resolves this issue...

libsndfile:sndfile_fuzzer: Index-out-of-bounds in psf_nms_adpcm_decode_block

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=5489440500875264 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilefuzzer Job Type: libfuzzerubsanlibsndfile Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...

EulerOS 2.0 SP2 : libsndfile (EulerOS-SA-2021-1319)

According to the version of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader...

Huawei EulerOS: Security Advisory for libsndfile (EulerOS-SA-2021-1319)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-12562 affecting package libsndfile 1.0.28-14

CVE-2017-12562 affecting package libsndfile 1.0.28-14. A patched version of the package is available...

CVE-2017-6892 affecting package libsndfile 1.0.28-14

CVE-2017-6892 affecting package libsndfile 1.0.28-14. A patched version of the package is available...

CVE-2017-6892 affecting package libsndfile 1.0.28-14

CVE-2017-6892 affecting package libsndfile 1.0.28-14. A patched version of the package is available...

CVE-2017-8365 affecting package libsndfile 1.0.28-14

CVE-2017-8365 affecting package libsndfile 1.0.28-14. A patched version of the package is available...

CVE-2017-12562 affecting package libsndfile 1.0.28-14

CVE-2017-12562 affecting package libsndfile 1.0.28-14. A patched version of the package is available...

CVE-2017-8365 affecting package libsndfile 1.0.28-14

CVE-2017-8365 affecting package libsndfile 1.0.28-14. A patched version of the package is available...

CentOS 8 : libsndfile (CESA-2020:1636)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1636 advisory. - libsndfile: stack-based buffer overflow in sndfile-deinterleave utility CVE-2018-13139 - libsndfile: buffer over-read in the function i2alawarray in...

The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file.

...

The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file.

...

It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this flaw to make the application crash.

...

There is a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a denial of service.

...

An issue was discovered in libsndfile 1.0.28. There is a NULL pointer dereference in the function sf_write_int in sndfile.c which will lead to a denial of service.

...

An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulaw_array in ulaw.c that will lead to a denial of service.

...