Published: 07/12/2017 Updated: 07/11/2023

It exists that libsndfile incorrectly handled certain malformed files. A remote attacker could use this issue to cause libsndfile to crash, resulting in a denial of service, or possibly execute arbitrary code.

Several security issues were fixed in libsndfile ...

Debian Bug report logs - #917416 libsndfile: CVE-2018-19758: heap-buffer-overflow in wav_write_header Package: src:libsndfile; Maintainer for src:libsndfile is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 27 Dec 2018 14:57:02 UTC ...

Debian Bug report logs - #884735 libsndfile: CVE-2017-17456 CVE-2017-17457 Package: src:libsndfile; Maintainer for src:libsndfile is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 18 Dec 2017 21:15:01 UTC Severity: important Tags: f ...

Debian Bug report logs - #876783 libsndfile: CVE-2017-14634 Package: src:libsndfile; Maintainer for src:libsndfile is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 25 Sep 2017 20:27:01 UTC Severity: normal Tags: fixed-upstream, sec ...

The function d2alaw_array() in alawc of libsndfile 1029pre1 may lead to a remote DoS attack (SEGV on unknown address 0x000000000000), a different vulnerability than CVE-2017-14245 ...

https://usn.ubuntu.com/4013-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2017-17456

CVE-2017-17456

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect