Lucene search
Veracode Vulnerability DatabaseVERACODE:43697HistoryOct 10, 2023 - 4:13 a.m.
Denial Of Service (DoS)
2023-10-1004:13:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
denial of service
signed integer overflow
mat4_read_header
application crash
vulnerability
libsndfile.so
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
21.6%
libsndfile.so is vulnerable to Denial Of Service (DoS). The vulnerability exists due to a signed integer overflow in the mat4_read_header function of mat4.c, which allows an attacker to cause an application crash.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libsndfile.so | le | 1.0.37 | |
| libsndfile.so | le | 1.0.37 |
Related
nessus
nessus
EulerOS 2.0 SP9 : libsndfile (EulerOS-SA-2023-3338)
2024-01-16 00:00:00
CentOS 8 : libsndfile (CESA-2024:3030)
2024-05-22 00:00:00
Oracle Linux 8 : libsndfile (ELSA-2024-3030)
2024-05-28 00:00:00
oraclelinux
oraclelinux
libsndfile security update
2024-05-23 00:00:00
libsndfile security update
2024-05-02 00:00:00
cve
cve
CVE-2022-33065
2023-07-18 14:15:12
osv
osv
libsndfile vulnerability
2023-11-02 20:36:08
Moderate: libsndfile security update
2024-05-22 00:00:00
Moderate: libsndfile security update
2024-04-30 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for libsndfile (EulerOS-SA-2024-1087)
2024-01-09 00:00:00
openSUSE: Security Advisory for libsndfile (SUSE-SU-2023:4330-1)
2024-03-04 00:00:00
Huawei EulerOS: Security Advisory for libsndfile (EulerOS-SA-2023-3338)
2023-12-12 00:00:00
nvd
nvd
CVE-2022-33065
2023-07-18 14:15:12
debiancve
debiancve
CVE-2022-33065
2023-07-18 14:15:12
almalinux
almalinux
Moderate: libsndfile security update
2024-04-30 00:00:00
Moderate: libsndfile security update
2024-05-22 00:00:00
redhatcve
redhatcve
CVE-2022-33065
2023-09-15 11:54:11
ubuntucve
ubuntucve
CVE-2022-33065
2023-07-18 00:00:00
mageia
mageia
Updated libsndfile packages fix a security vulnerability
2023-11-07 02:08:32
amazon
amazon
Medium: libsndfile
2024-01-03 21:04:00
prion
prion
Buffer overflow
2023-07-18 14:15:00
redhat
redhat
(RHSA-2024:2184) Moderate: libsndfile security update
2024-04-30 06:14:59
(RHSA-2024:3030) Moderate: libsndfile security update
2024-05-22 06:35:24
ubuntu
ubuntu
libsndfile vulnerability
2023-11-02 00:00:00
freebsd
freebsd
libsndfile_project -- Integer overflow in dataend calculation
2023-07-18 00:00:00
cvelist
cvelist
CVE-2022-33065
2023-07-18 00:00:00
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00
HP ThinPro 8.0 SP 8 Security Updates
2024-03-01 00:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
21.6%
Related for VERACODE:43697