A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file. The vulnerability can be triggered by the executable sndfile-deinterleave.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libsndfile-devel | May 4, 2022 | Jul 4, 2018 | |
| Alpine Linux | alpine-linux-upgrade-libsndfile | Mar 26, 2024 | Jul 4, 2018 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libsndfileamazon-linux-ami-2-upgrade-libsndfile-debuginfoamazon-linux-ami-2-upgrade-libsndfile-develamazon-linux-ami-2-upgrade-libsndfile-utils | Jun 18, 2020 | Jul 4, 2018 | |
| Centos_linux | — | centos-upgrade-libsndfilecentos-upgrade-libsndfile-debuginfocentos-upgrade-libsndfile-debugsourcecentos-upgrade-libsndfile-develcentos-upgrade-libsndfile-utilscentos-upgrade-libsndfile-utils-debuginfo | Apr 1, 2020 | Jul 4, 2018 |
| Debian | debian-upgrade-libsndfile | Feb 20, 2019 | Jul 4, 2018 | |
| Gentoo Linux | gentoo-linux-upgrade-media-libs-libsndfile | Dec 3, 2018 | Jul 4, 2018 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-libsndfile | Dec 31, 2018 | Jul 4, 2018 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-libsndfile | Feb 15, 2019 | Jul 4, 2018 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-libsndfile | Feb 15, 2019 | Jul 4, 2018 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-library-libsndfile-1-0-28-11-4-4-0-1-2-0 | Dec 17, 2018 | Jul 4, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-libsndfileoracle-linux-upgrade-libsndfile-develoracle-linux-upgrade-libsndfile-utils | Oct 5, 2022 | Jul 3, 2018 |
| Redhat_linux | redhat-upgrade-libsndfileredhat-upgrade-libsndfile-debuginforedhat-upgrade-libsndfile-debugsourceredhat-upgrade-libsndfile-develredhat-upgrade-libsndfile-utilsredhat-upgrade-libsndfile-utils-debuginfo | Apr 1, 2020 | Jul 4, 2018 | |
| Rocky_linux | rocky-upgrade-libsndfilerocky-upgrade-libsndfile-debuginforocky-upgrade-libsndfile-debugsourcerocky-upgrade-libsndfile-devel | Mar 12, 2024 | Jul 4, 2018 | |
| Suse | — | suse-upgrade-libsndfile-develsuse-upgrade-libsndfile-progssuse-upgrade-libsndfile1suse-upgrade-libsndfile1-32bit | Jul 28, 2018 | Jul 4, 2018 |
| Ubuntu | ubuntu-pro-upgrade-libsndfile1ubuntu-pro-upgrade-sndfile-programsubuntu-upgrade-libsndfile1ubuntu-upgrade-sndfile-programs | Jun 10, 2019 | Jul 4, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub