PT-2017-17921 · Unknown+3 · Libsndfile+3
Agostino Sarubbo
·
Publicado
2017-04-12
·
Atualizado
2017-09-27
·
CVE-2017-7742
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
libsndfile versions prior to 1.0.28
Description
The issue is related to an error in the
flac buffer copy() function, which can be exploited to cause a segmentation violation with read memory access via a specially crafted FLAC file during a resample attempt. This is similar to a previously known issue.Recommendations
For versions prior to 1.0.28, update to version 1.0.28 or later to resolve the issue. As a temporary workaround, consider avoiding the use of specially crafted FLAC files that could trigger the segmentation violation. Restrict access to the
flac buffer copy() function to minimize the risk of exploitation until a patch is applied.Exploit
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Suse
Ubuntu
Libsndfile