A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file. The vulnerability can be triggered by the executable sndfile-deinterleave.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsndfile-devel | May 4, 2022 | Jul 4, 2018 |
| Alpine Linux | — | Upgrade libsndfile | Mar 26, 2024 | Jul 4, 2018 |
| Amazon Linux Ami 2 | — | Upgrade libsndfileUpgrade libsndfile-utilsUpgrade libsndfile-debuginfoUpgrade libsndfile-devel | Jun 18, 2020 | Jul 4, 2018 |
| Centos_linux | — | Upgrade libsndfile-utils-debuginfoUpgrade libsndfile-debuginfoUpgrade libsndfile-debugsourceUpgrade libsndfileUpgrade libsndfile-develUpgrade libsndfile-utils | Apr 1, 2020 | Jul 4, 2018 |
| Debian | — | Upgrade libsndfile | Feb 20, 2019 | Jul 4, 2018 |
| Gentoo Linux | — | Upgrade media-libs/libsndfile. | Dec 3, 2018 | Jul 4, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libsndfile | Dec 31, 2018 | Jul 4, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsndfile | Feb 15, 2019 | Jul 4, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsndfile | Feb 15, 2019 | Jul 4, 2018 |
| Oracle Solaris | — | Upgrade library/libsndfile to version 1.0.28-11.4.4.0.1.2.0 on Solaris 11.4 | Dec 17, 2018 | Jul 4, 2018 |
| Oracle_linux | — | Upgrade libsndfile-develUpgrade libsndfileUpgrade libsndfile-utils | Oct 5, 2022 | Jul 3, 2018 |
| Redhat_linux | — | Upgrade libsndfile-debugsourceUpgrade libsndfile-utilsUpgrade libsndfile-utils-debuginfoUpgrade libsndfile-develUpgrade libsndfile-debuginfoUpgrade libsndfile | Apr 1, 2020 | Jul 4, 2018 |
| Rocky_linux | — | Upgrade libsndfile-debuginfoUpgrade libsndfileUpgrade libsndfile-debugsourceUpgrade libsndfile-devel | Mar 12, 2024 | Jul 4, 2018 |
| Suse | — | Upgrade libsndfile-progsUpgrade libsndfile-develUpgrade libsndfile1-32bitUpgrade libsndfile1 | Jul 28, 2018 | Jul 4, 2018 |
| Ubuntu | — | Upgrade libsndfile1 (Ubuntu Pro)Upgrade libsndfile1Upgrade sndfile-programsUpgrade sndfile-programs (Ubuntu Pro) | Jun 10, 2019 | Jul 4, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub