A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file. The vulnerability can be triggered by the executable sndfile-deinterleave.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "low", "binaries": [ { "binary_version": "1.0.25-7ubuntu2.2+esm1", "binary_name": "libsndfile1" }, { "binary_version": "1.0.25-7ubuntu2.2+esm1", "binary_name": "libsndfile1-dbg" }, { "binary_version": "1.0.25-7ubuntu2.2+esm1", "binary_name": "libsndfile1-dbgsym" }, { "binary_version": "1.0.25-7ubuntu2.2+esm1", "binary_name": "libsndfile1-dev" }, { "binary_version": "1.0.25-7ubuntu2.2+esm1", "binary_name": "sndfile-programs" }, { "binary_version": "1.0.25-7ubuntu2.2+esm1", "binary_name": "sndfile-programs-dbg" }, { "binary_version": "1.0.25-7ubuntu2.2+esm1", "binary_name": "sndfile-programs-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "1.0.25-10ubuntu0.16.04.2", "binary_name": "libsndfile1" }, { "binary_version": "1.0.25-10ubuntu0.16.04.2", "binary_name": "libsndfile1-dbg" }, { "binary_version": "1.0.25-10ubuntu0.16.04.2", "binary_name": "libsndfile1-dbgsym" }, { "binary_version": "1.0.25-10ubuntu0.16.04.2", "binary_name": "libsndfile1-dev" }, { "binary_version": "1.0.25-10ubuntu0.16.04.2", "binary_name": "sndfile-programs" }, { "binary_version": "1.0.25-10ubuntu0.16.04.2", "binary_name": "sndfile-programs-dbg" }, { "binary_version": "1.0.25-10ubuntu0.16.04.2", "binary_name": "sndfile-programs-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "1.0.28-4ubuntu0.18.04.1", "binary_name": "libsndfile1" }, { "binary_version": "1.0.28-4ubuntu0.18.04.1", "binary_name": "libsndfile1-dbgsym" }, { "binary_version": "1.0.28-4ubuntu0.18.04.1", "binary_name": "libsndfile1-dev" }, { "binary_version": "1.0.28-4ubuntu0.18.04.1", "binary_name": "sndfile-programs" }, { "binary_version": "1.0.28-4ubuntu0.18.04.1", "binary_name": "sndfile-programs-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "1.0.28-6", "binary_name": "libsndfile1" }, { "binary_version": "1.0.28-6", "binary_name": "libsndfile1-dbgsym" }, { "binary_version": "1.0.28-6", "binary_name": "libsndfile1-dev" }, { "binary_version": "1.0.28-6", "binary_name": "sndfile-programs" }, { "binary_version": "1.0.28-6", "binary_name": "sndfile-programs-dbgsym" } ] }