A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file. The vulnerability can be triggered by the executable sndfile-deinterleave.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "libsndfile1", "binary_version": "1.0.25-7ubuntu2.2+esm1" }, { "binary_name": "libsndfile1-dbg", "binary_version": "1.0.25-7ubuntu2.2+esm1" }, { "binary_name": "libsndfile1-dbgsym", "binary_version": "1.0.25-7ubuntu2.2+esm1" }, { "binary_name": "libsndfile1-dev", "binary_version": "1.0.25-7ubuntu2.2+esm1" }, { "binary_name": "sndfile-programs", "binary_version": "1.0.25-7ubuntu2.2+esm1" }, { "binary_name": "sndfile-programs-dbg", "binary_version": "1.0.25-7ubuntu2.2+esm1" }, { "binary_name": "sndfile-programs-dbgsym", "binary_version": "1.0.25-7ubuntu2.2+esm1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "libsndfile1", "binary_version": "1.0.25-10ubuntu0.16.04.2" }, { "binary_name": "libsndfile1-dbg", "binary_version": "1.0.25-10ubuntu0.16.04.2" }, { "binary_name": "libsndfile1-dbgsym", "binary_version": "1.0.25-10ubuntu0.16.04.2" }, { "binary_name": "libsndfile1-dev", "binary_version": "1.0.25-10ubuntu0.16.04.2" }, { "binary_name": "sndfile-programs", "binary_version": "1.0.25-10ubuntu0.16.04.2" }, { "binary_name": "sndfile-programs-dbg", "binary_version": "1.0.25-10ubuntu0.16.04.2" }, { "binary_name": "sndfile-programs-dbgsym", "binary_version": "1.0.25-10ubuntu0.16.04.2" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "libsndfile1", "binary_version": "1.0.28-4ubuntu0.18.04.1" }, { "binary_name": "libsndfile1-dbgsym", "binary_version": "1.0.28-4ubuntu0.18.04.1" }, { "binary_name": "libsndfile1-dev", "binary_version": "1.0.28-4ubuntu0.18.04.1" }, { "binary_name": "sndfile-programs", "binary_version": "1.0.28-4ubuntu0.18.04.1" }, { "binary_name": "sndfile-programs-dbgsym", "binary_version": "1.0.28-4ubuntu0.18.04.1" } ] }