A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file. The vulnerability can be triggered by the executable sndfile-deinterleave.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsndfile-devel | May 4, 2022 | Jul 4, 2018 |
| Alpine Linux | — | Upgrade libsndfile | Mar 26, 2024 | Jul 4, 2018 |
| Amazon Linux Ami 2 | — | Upgrade libsndfile-utilsUpgrade libsndfileUpgrade libsndfile-develUpgrade libsndfile-debuginfo | Jun 18, 2020 | Jul 4, 2018 |
| Centos_linux | — | Upgrade libsndfileUpgrade libsndfile-develUpgrade libsndfile-utilsUpgrade libsndfile-debugsourceUpgrade libsndfile-debuginfoUpgrade libsndfile-utils-debuginfo | Apr 1, 2020 | Jul 4, 2018 |
| Debian | — | Upgrade libsndfile | Feb 20, 2019 | Jul 4, 2018 |
| Gentoo Linux | — | Upgrade media-libs/libsndfile. | Dec 3, 2018 | Jul 4, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libsndfile | Dec 31, 2018 | Jul 4, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsndfile | Feb 15, 2019 | Jul 4, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsndfile | Feb 15, 2019 | Jul 4, 2018 |
| Oracle Solaris | — | Upgrade library/libsndfile to version 1.0.28-11.4.4.0.1.2.0 on Solaris 11.4 | Dec 17, 2018 | Jul 4, 2018 |
| Oracle_linux | — | Upgrade libsndfileUpgrade libsndfile-utilsUpgrade libsndfile-devel | Oct 5, 2022 | Jul 3, 2018 |
| Redhat_linux | — | Upgrade libsndfile-debugsourceUpgrade libsndfile-develUpgrade libsndfile-utils-debuginfoUpgrade libsndfile-utilsUpgrade libsndfile-debuginfoUpgrade libsndfile | Apr 1, 2020 | Jul 4, 2018 |
| Rocky_linux | — | Upgrade libsndfile-debugsourceUpgrade libsndfile-develUpgrade libsndfileUpgrade libsndfile-debuginfo | Mar 12, 2024 | Jul 4, 2018 |
| Suse | — | Upgrade libsndfile-progsUpgrade libsndfile-develUpgrade libsndfile1Upgrade libsndfile1-32bit | Jul 28, 2018 | Jul 4, 2018 |
| Ubuntu | — | Upgrade libsndfile1 (Ubuntu Pro)Upgrade libsndfile1Upgrade sndfile-programsUpgrade sndfile-programs (Ubuntu Pro) | Jun 10, 2019 | Jul 4, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub