PT-2017-14648 · Erik De Castro Lopo+3 · Libsndfile+3

Publicado 2016-11-14 · Atualizado 2021-01-26 · CVE-2017-16942

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libsndfile version 1.0.25

Description A divide-by-zero error exists in the function wav w64 read fmt chunk() in wav w64.c, which may lead to denial of service when playing a crafted audio file.

Recommendations For libsndfile version 1.0.25, update to version 1.0.26 to resolve the issue.

Correção

DoS

Divide By Zero

Enumeração de Fraquezas

CWE-369

Identificadores relacionados

ALT-PU-2016-2286

CVE-2017-16942

MGASA-2018-0236

SUSE-SU-2018:0351-1

SUSE-SU-2018:0352-1

USN-4013-1

USN-4704-1

Produtos afetados

Alt Linux

Suse

Ubuntu

Libsndfile

Referências · 45

• https://github.com/erikd/libsndfile/issues/341 · Nota
• https://osv.dev/vulnerability/USN-4013-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-19758 · Aviso do Fabricante
• https://bugzilla.suse.com/1069874 · Nota
• https://osv.dev/vulnerability/USN-4704-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-19662 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=22561 · Nota
• https://bugzilla.suse.com/1059913 · Nota
• https://osv.dev/vulnerability/CVE-2017-16942 · Aviso do Fabricante
• https://usn.ubuntu.com/4013-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2018-0236 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2018/suse-su-20180351-1 · Nota
• https://ubuntu.com/security/CVE-2019-3832 · Aviso do Fabricante
• https://bugzilla.suse.com/1059911 · Nota
• https://ubuntu.com/security/notices/USN-4013-1 · Aviso do Fabricante