libsndfile: buffer over-read in the function i2alaw_array in alaw.c

An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alawarray in alaw.c that will lead to a denial of service...

Huawei EulerOS: Security Advisory for libsndfile (EulerOS-SA-2020-2094)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libsndfile:sndfile_fuzzer: Heap-buffer-overflow in psf_binheader_readf

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=4924357405835264 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilefuzzer Job Type: libfuzzerasanlibsndfile Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

EulerOS 2.0 SP3 : libsndfile (EulerOS-SA-2020-2094)

According to the versions of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in...

libsndfile:sndfile_fuzzer: Use-of-uninitialized-value in dwvw_decode_load_bits

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=6483024919920640 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilefuzzer Job Type: libfuzzermsanlibsndfile Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libsndfile:sndfile_fuzzer: Use-of-uninitialized-value in psf_log_printf

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=5961843607339008 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilefuzzer Job Type: libfuzzermsanlibsndfile Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libsndfile:sndfile_fuzzer: Index-out-of-bounds in psf_nms_adpcm_decode_block

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=6310080797212672 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilefuzzer Job Type: libfuzzerubsanlibsndfile Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...

libsndfile:sndfile_fuzzer: Heap-buffer-overflow in wavlike_ima_decode_block

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=6044202054713344 Project: libsndfile Fuzzing Engine: afl Fuzz Target: sndfilefuzzer Job Type: aflasanlibsndfile Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

libsndfile:sndfile_fuzzer: Nested bug in the same thread, aborting. with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5087344745775104 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilefuzzer Job Type: libfuzzermsanlibsndfile Platform Id: linux Crash Type: Nested bug in the same thread, aborting. Crash Address: Crash State: NULL Sanitizer: memory...

Huawei EulerOS: Security Advisory for libsndfile (EulerOS-SA-2020-1990)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.2.0 : libsndfile (EulerOS-SA-2020-1990)

According to the version of the libsndfile package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alawarray in alaw.c that...

libsndfile:sndfile_fuzzer: Use-of-uninitialized-value in endswap_int64_t_array

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=5632785497456640 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilefuzzer Job Type: libfuzzermsanlibsndfile Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libsndfile:sndfile_fuzzer: Use-of-uninitialized-value in psf_log_printf

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=4907258079870976 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilefuzzer Job Type: libfuzzermsanlibsndfile Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libsndfile:sndfile_fuzzer: Negative-size-param in vfread

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=4838501290606592 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilefuzzer Job Type: libfuzzerasanlibsndfile Platform Id: linux Crash Type: Negative-size-param Crash Address:...

GLSA-202007-65 : libsndfile: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-65 libsndfile: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libsndfile. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

libsndfile: Multiple vulnerabilities

Background libsndfile is a C library for reading and writing files containing sampled sound. Description Multiple vulnerabilities have been discovered in libsndfile. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...

FreeBSD : libsndfile -- out-of-bounds read memory access (086c96cd-d0cb-11ea-b922-5404a68ad561)

RedHat reports : It was discovered the fix for CVE-2018-19758 was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash. C Tenable Network Security, Inc. The descriptive text and...

Huawei EulerOS: Security Advisory for libsndfile (EulerOS-SA-2020-1724)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.0 : libsndfile (EulerOS-SA-2020-1724)

According to the versions of the libsndfile package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There is a heap-based buffer over-read at wav.c in wavwriteheader in libsndfile 1.0.28 that will cause a denial of...

Amazon Linux 2 : libsndfile (ALAS-2020-1435)

The version of libsndfile installed on the remote host is prior to 1.0.25-11. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1435 advisory. A stack-based buffer overflow in psfmemset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of servi...