Lucene search

UbuntuUSN-5025-2

HistoryJul 29, 2021 - 12:00 a.m.

libsndfile vulnerability

2021-07-2900:00:00

ubuntu.com

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.6%

JSON

Releases

Ubuntu 16.04 ESM
Ubuntu 14.04 ESM

Packages

libsndfile - Library for reading/writing audio files

Details

USN-5025-1 fixed a vulnerability in libsndfile. This update provides
the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.

Original advisory details:

It was discovered that libsndfile incorrectly handled certain malformed
files. A remote attacker could use this issue to cause libsndfile to crash,
resulting in a denial of service, or possibly execute arbitrary code.

OSVersionArchitecturePackageVersionFilename
Ubuntu16.04noarchlibsndfile1< 1.0.25-10ubuntu0.16.04.3+esm1UNKNOWN
Ubuntu16.04noarchlibsndfile1< 1.0.25-10ubuntu0.16.04.3UNKNOWN
Ubuntu16.04noarchlibsndfile1-dbg< 1.0.25-10ubuntu0.16.04.3UNKNOWN
Ubuntu16.04noarchlibsndfile1-dbgsym< 1.0.25-10ubuntu0.16.04.3UNKNOWN
Ubuntu16.04noarchlibsndfile1-dev< 1.0.25-10ubuntu0.16.04.3UNKNOWN
Ubuntu16.04noarchsndfile-programs< 1.0.25-10ubuntu0.16.04.3UNKNOWN
Ubuntu16.04noarchsndfile-programs-dbg< 1.0.25-10ubuntu0.16.04.3UNKNOWN
Ubuntu16.04noarchsndfile-programs-dbgsym< 1.0.25-10ubuntu0.16.04.3UNKNOWN
Ubuntu16.04noarchsndfile-programs< 1.0.25-10ubuntu0.16.04.3+esm1UNKNOWN
Ubuntu14.04noarchlibsndfile1< 1.0.25-7ubuntu2.2+esm2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	16.04	noarch	libsndfile1	< 1.0.25-10ubuntu0.16.04.3+esm1	UNKNOWN
Ubuntu	16.04	noarch	libsndfile1	< 1.0.25-10ubuntu0.16.04.3	UNKNOWN
Ubuntu	16.04	noarch	libsndfile1-dbg	< 1.0.25-10ubuntu0.16.04.3	UNKNOWN
Ubuntu	16.04	noarch	libsndfile1-dbgsym	< 1.0.25-10ubuntu0.16.04.3	UNKNOWN
Ubuntu	16.04	noarch	libsndfile1-dev	< 1.0.25-10ubuntu0.16.04.3	UNKNOWN
Ubuntu	16.04	noarch	sndfile-programs	< 1.0.25-10ubuntu0.16.04.3	UNKNOWN
Ubuntu	16.04	noarch	sndfile-programs-dbg	< 1.0.25-10ubuntu0.16.04.3	UNKNOWN
Ubuntu	16.04	noarch	sndfile-programs-dbgsym	< 1.0.25-10ubuntu0.16.04.3	UNKNOWN
Ubuntu	16.04	noarch	sndfile-programs	< 1.0.25-10ubuntu0.16.04.3+esm1	UNKNOWN
Ubuntu	14.04	noarch	libsndfile1	< 1.0.25-7ubuntu2.2+esm2	UNKNOWN