libsndfile vulnerability

2011-07-2500:00:00

ubuntu.com

7.5 High

AI Score

Confidence

Low

0.075 Low

EPSS

Percentile

94.1%

JSON

Releases

Ubuntu 11.04
Ubuntu 10.10
Ubuntu 10.04

Packages

libsndfile - Library for reading/writing audio files

Details

Hossein Lotfi discovered that libsndfile did not properly verify the header
length and number of channels for PARIS Audio Format (PAF) audio files. An
attacker could exploit this to cause a denial of service via application
crash, or possibly execute arbitrary code with the privileges of the user
invoking the program.

OSVersionArchitecturePackageVersionFilename
Ubuntu11.04noarchlibsndfile1< 1.0.23-1ubuntu0.1UNKNOWN
Ubuntu11.04noarchlibsndfile1-dev< 1.0.23-1ubuntu0.1UNKNOWN
Ubuntu11.04noarchsndfile-programs< 1.0.23-1ubuntu0.1UNKNOWN
Ubuntu10.10noarchlibsndfile1< 1.0.21-2ubuntu0.10.10.1UNKNOWN
Ubuntu10.10noarchlibsndfile1-dev< 1.0.21-2ubuntu0.10.10.1UNKNOWN
Ubuntu10.10noarchsndfile-programs< 1.0.21-2ubuntu0.10.10.1UNKNOWN
Ubuntu10.04noarchlibsndfile1< 1.0.21-2ubuntu0.10.04.1UNKNOWN
Ubuntu10.04noarchlibsndfile1-dev< 1.0.21-2ubuntu0.10.04.1UNKNOWN
Ubuntu10.04noarchsndfile-programs< 1.0.21-2ubuntu0.10.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	11.04	noarch	libsndfile1	< 1.0.23-1ubuntu0.1	UNKNOWN
Ubuntu	11.04	noarch	libsndfile1-dev	< 1.0.23-1ubuntu0.1	UNKNOWN
Ubuntu	11.04	noarch	sndfile-programs	< 1.0.23-1ubuntu0.1	UNKNOWN
Ubuntu	10.10	noarch	libsndfile1	< 1.0.21-2ubuntu0.10.10.1	UNKNOWN
Ubuntu	10.10	noarch	libsndfile1-dev	< 1.0.21-2ubuntu0.10.10.1	UNKNOWN
Ubuntu	10.10	noarch	sndfile-programs	< 1.0.21-2ubuntu0.10.10.1	UNKNOWN
Ubuntu	10.04	noarch	libsndfile1	< 1.0.21-2ubuntu0.10.04.1	UNKNOWN
Ubuntu	10.04	noarch	libsndfile1-dev	< 1.0.21-2ubuntu0.10.04.1	UNKNOWN
Ubuntu	10.04	noarch	sndfile-programs	< 1.0.21-2ubuntu0.10.04.1	UNKNOWN