PT-2018-2727 · Eric Young+7 · Libsndfile+7

Published 2018-07-03 · Updated 2024-06-15 · CVE-2018-13139

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libsndfile version 1.0.28

Description The issue is related to a stack-based buffer overflow in the psf memset function, which can be triggered by a crafted audio file. This allows a remote attacker to cause a denial of service, potentially leading to an application crash. The vulnerability can be exploited using the sndfile-deinterleave executable.

Recommendations For libsndfile version 1.0.28, consider avoiding the use of the sndfile-deinterleave executable until a patch is available. As a temporary workaround, restrict access to crafted audio files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-119

CWE-787

Related Identifiers

ALSA-2020:1636

ALT-PU-2020-3449

ALT-PU-2020-3469

ALT-PU-2021-2149

BDU:2019-01624

CESA-2020_1185

CESA-2020_1636

CVE-2018-13139

DLA-1618-1

MGASA-2018-0336

OPENSUSE-SU-2018_2209-1

OPENSUSE-SU-2018_2214-1

OPENSUSE-SU-2021:1166-1

OPENSUSE-SU-2021:2764-1

OPENSUSE-SU-2021_1166-1

OPENSUSE-SU-2021_2764-1

OPENSUSE-SU-2024:10992-1

RHSA-2020:1185

RHSA-2020:1636

RHSA-2020_1185

RHSA-2020_1636

RLSA-2020:1636

SUSE-SU-2018:2065-1

SUSE-SU-2018:2074-1

SUSE-SU-2021:2615-1

SUSE-SU-2021:2764-1

SUSE-SU-2021_2615-1

SUSE-SU-2021_2764-1

USN-4013-1

USN-4704-1

Affected Products

Alt Linux

Almalinux

Centos

Red Hat

Rocky Linux

Suse

Ubuntu

Libsndfile

References · 81

• https://ubuntu.com/security/CVE-2018-13139 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-14245 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2020:1636 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2018-13139 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-13139 · Security Note
• https://ubuntu.com/security/notices/USN-4704-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2020-1185.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:2764-1 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2020:1636 · Vendor Advisory
• https://usn.ubuntu.com/4013-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-14246 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:2764-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2018-0336 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-13139 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4013-1 · Vendor Advisory