EulerOS Virtualization 3.0.6.0 : libsndfile (EulerOS-SA-2020-1724)

According to the versions of the libsndfile package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There is a heap-based buffer over-read at wav.c in wavwriteheader in libsndfile 1.0.28 that will cause a denial of...

Amazon Linux 2 : libsndfile (ALAS-2020-1435)

The version of libsndfile installed on the remote host is prior to 1.0.25-11. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1435 advisory. A stack-based buffer overflow in psfmemset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of servi...

Medium: libsndfile

Issue Overview: A stack-based buffer overflow in psfmemset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted audio file. The vulnerability can be triggered by the executable...

Huawei EulerOS: Security Advisory for libsndfile (EulerOS-SA-2020-1608)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : libsndfile (EulerOS-SA-2020-1608)

According to the versions of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libsndfile 1.0.28. There is a NULL pointer dereference in the function sfwriteint in sndfile.c, which will lead to...

Denial Of Service (DoS)

libsndfile is vulnerable to denial of service. A stack-based buffer overflow in the flacbuffercopy function in flac.c allows an attacker to crash the application using a malicious FLAC file, or potentially execute arbitrary code on the system...

Denial Of Service (DoS)

libsndfile is vulnerable to denial of service DoS. The vulnerability exists as the flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service invalid read and application crash via a crafted audio file...

Denial Of Service (DoS)

libsndfile is vulnerable to denial of service DoS. The vulnerability exists as the flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted audio file...

Denial Of Service (DoS)

libsndfile is vulnerable to denial of service DoS. The vulnerability exists as the flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted audio file...

Denial Of Service (DoS)

libsndfile is vulnerable to denial of service DoS. The vulnerability exists as the i2lesarray function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted audio file...

Denial Of Service (DoS)

libsndfile is vulnerable to denial of service DoS. The vulnerability exists as an error in the flacbuffercopy function flac.c can be exploited to cause a segmentation violation with read memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

Denial Of Service (DoS)

libsndfile is vulnerable to denial of service DoS. The vulnerability exists as an error in the flacbuffercopy function flac.c can be exploited to cause a segmentation violation with write memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

Arbitrary Code Execution

libsndfile is vulnerable to arbitrary code execution. The vulnerability exists as a heap-based Buffer Overflow in the psfbinheaderwritef function in common.c in libsndfile through 1.0.28 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impa...

MGASA-2020-0197 Updated libsndfile packages fix security vulnerabilities

Updated libsndfile packages fix security vulnerabilities: An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulawarray in ulaw.c that will lead to a denial of service CVE-2018-19661. An issue was discovered in libsndfile 1.0.28. There is a buffer over-read...

Updated libsndfile packages fix security vulnerabilities

Updated libsndfile packages fix security vulnerabilities: An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulawarray in ulaw.c that will lead to a denial of service CVE-2018-19661. An issue was discovered in libsndfile 1.0.28. There is a buffer over-read...

libsndfile security update

1.0.28-10 - fix CVE-2018-19661 and CVE-2018-19662 - buffer over-read in the function i2alawarray in alaw 1673085 1.0.28-9 - fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility 1598482...

EulerOS Virtualization for ARM 64 3.0.2.0 : libsndfile (EulerOS-SA-2020-1566)

According to the versions of the libsndfile package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - There is a heap-based buffer over-read at wav.c in wavwriteheader in libsndfile 1.0.28 that will cause a denial of...

Huawei EulerOS: Security Advisory for libsndfile (EulerOS-SA-2020-1566)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Privilege Escalation

libsndfile is vulnerable to privilege escalation. The vulnerability exists through a buffer over-read in the function i2alawarray in alaw.c...

libsndfile: buffer over-read in the function i2alaw_array in alaw.c

An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alawarray in alaw.c that will lead to a denial of service...