audiofile vulnerabilities

2017-03-2200:00:00

ubuntu.com

7.2 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

85.7%

JSON

Releases

Ubuntu 14.04 ESM
Ubuntu 12.04

Packages

audiofile - Open-source version of the SGI audiofile library

Details

Agostino Sarubbo discovered that audiofile incorrectly handled certain
malformed audio files. If a user or automated system were tricked into
processing a specially crafted audio file, a remote attacker could cause
applications linked against audiofile to crash, leading to a denial of
service, or possibly execute arbitrary code.

OSVersionArchitecturePackageVersionFilename
Ubuntu14.04noarchlibaudiofile1< 0.3.6-2ubuntu0.14.04.2UNKNOWN
Ubuntu14.04noarchaudiofile-tools< 0.3.6-2ubuntu0.14.04.2UNKNOWN
Ubuntu14.04noarchaudiofile-tools-dbgsym< 0.3.6-2ubuntu0.14.04.2UNKNOWN
Ubuntu14.04noarchlibaudiofile-dbg< 0.3.6-2ubuntu0.14.04.2UNKNOWN
Ubuntu14.04noarchlibaudiofile-dev< 0.3.6-2ubuntu0.14.04.2UNKNOWN
Ubuntu14.04noarchlibaudiofile-dev-dbgsym< 0.3.6-2ubuntu0.14.04.2UNKNOWN
Ubuntu14.04noarchlibaudiofile1-dbgsym< 0.3.6-2ubuntu0.14.04.2UNKNOWN
Ubuntu12.04noarchlibaudiofile1< 0.3.3-2ubuntu0.3UNKNOWN
Ubuntu12.04noarchaudiofile-tools< 0.3.3-2ubuntu0.3UNKNOWN
Ubuntu12.04noarchaudiofile-tools-dbgsym< 0.3.3-2ubuntu0.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	14.04	noarch	libaudiofile1	< 0.3.6-2ubuntu0.14.04.2	UNKNOWN
Ubuntu	14.04	noarch	audiofile-tools	< 0.3.6-2ubuntu0.14.04.2	UNKNOWN
Ubuntu	14.04	noarch	audiofile-tools-dbgsym	< 0.3.6-2ubuntu0.14.04.2	UNKNOWN
Ubuntu	14.04	noarch	libaudiofile-dbg	< 0.3.6-2ubuntu0.14.04.2	UNKNOWN
Ubuntu	14.04	noarch	libaudiofile-dev	< 0.3.6-2ubuntu0.14.04.2	UNKNOWN
Ubuntu	14.04	noarch	libaudiofile-dev-dbgsym	< 0.3.6-2ubuntu0.14.04.2	UNKNOWN
Ubuntu	14.04	noarch	libaudiofile1-dbgsym	< 0.3.6-2ubuntu0.14.04.2	UNKNOWN
Ubuntu	12.04	noarch	libaudiofile1	< 0.3.3-2ubuntu0.3	UNKNOWN
Ubuntu	12.04	noarch	audiofile-tools	< 0.3.3-2ubuntu0.3	UNKNOWN
Ubuntu	12.04	noarch	audiofile-tools-dbgsym	< 0.3.3-2ubuntu0.3	UNKNOWN