The psf_fwrite function in file_io.c in libsndfile allows attackers to cause a denial of service (divide-by-zero error and application crash) via unspecified vectors related to the headindex variable.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libsndfile | Mar 31, 2017 | Nov 19, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libsndfile | Dec 4, 2019 | Nov 19, 2015 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsndfile | Dec 18, 2019 | Nov 19, 2015 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsndfile | Nov 19, 2019 | Nov 19, 2015 |
| Suse | — | Upgrade libsndfile1Upgrade libsndfile-develUpgrade libsndfile1-32bitUpgrade libsndfileUpgrade libsndfile-32bitUpgrade libsndfile-x86 | Dec 18, 2015 | Nov 12, 2015 |
| Ubuntu | — | Upgrade libsndfile1 | Dec 8, 2015 | Nov 19, 2015 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub