A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file. The vulnerability can be triggered by the executable sndfile-deinterleave.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsndfile-devel | May 4, 2022 | Jul 4, 2018 |
| Alpine Linux | — | Upgrade libsndfile | Mar 26, 2024 | Jul 4, 2018 |
| Amazon Linux Ami 2 | — | Upgrade libsndfile-utilsUpgrade libsndfileUpgrade libsndfile-debuginfoUpgrade libsndfile-devel | Jun 18, 2020 | Jul 4, 2018 |
| Centos_linux | — | Upgrade libsndfile-develUpgrade libsndfile-utilsUpgrade libsndfileUpgrade libsndfile-utils-debuginfoUpgrade libsndfile-debugsourceUpgrade libsndfile-debuginfo | Apr 1, 2020 | Jul 4, 2018 |
| Debian | — | Upgrade libsndfile | Feb 20, 2019 | Jul 4, 2018 |
| Gentoo Linux | — | Upgrade media-libs/libsndfile. | Dec 3, 2018 | Jul 4, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libsndfile | Dec 31, 2018 | Jul 4, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsndfile | Feb 15, 2019 | Jul 4, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libsndfile | Feb 15, 2019 | Jul 4, 2018 |
| Oracle Solaris | — | Upgrade library/libsndfile to version 1.0.28-11.4.4.0.1.2.0 on Solaris 11.4 | Dec 17, 2018 | Jul 4, 2018 |
| Oracle_linux | — | Upgrade libsndfile-develUpgrade libsndfileUpgrade libsndfile-utils | Oct 5, 2022 | Jul 3, 2018 |
| Redhat_linux | — | Upgrade libsndfile-debuginfoUpgrade libsndfileUpgrade libsndfile-utils-debuginfoUpgrade libsndfile-utilsUpgrade libsndfile-develUpgrade libsndfile-debugsource | Apr 1, 2020 | Jul 4, 2018 |
| Rocky_linux | — | Upgrade libsndfile-develUpgrade libsndfile-debugsourceUpgrade libsndfile-debuginfoUpgrade libsndfile | Mar 12, 2024 | Jul 4, 2018 |
| Suse | — | Upgrade libsndfile1-32bitUpgrade libsndfile-develUpgrade libsndfile1Upgrade libsndfile-progs | Jul 28, 2018 | Jul 4, 2018 |
| Ubuntu | — | Upgrade libsndfile1 (Ubuntu Pro)Upgrade sndfile-programsUpgrade libsndfile1Upgrade sndfile-programs (Ubuntu Pro) | Jun 10, 2019 | Jul 4, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub