Agostino Sarubbo and Jakub Jirasek discovered that libsndfile incorrectly handled certain malformed files. A remote attacker could use this issue to cause libsndfile to crash, resulting in a denial of service, or possibly execute arbitrary code.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "libsndfile1", "binary_version": "1.0.25-7ubuntu2.2" }, { "binary_name": "libsndfile1-dbg", "binary_version": "1.0.25-7ubuntu2.2" }, { "binary_name": "libsndfile1-dbgsym", "binary_version": "1.0.25-7ubuntu2.2" }, { "binary_name": "libsndfile1-dev", "binary_version": "1.0.25-7ubuntu2.2" }, { "binary_name": "sndfile-programs", "binary_version": "1.0.25-7ubuntu2.2" }, { "binary_name": "sndfile-programs-dbg", "binary_version": "1.0.25-7ubuntu2.2" }, { "binary_name": "sndfile-programs-dbgsym", "binary_version": "1.0.25-7ubuntu2.2" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "libsndfile1", "binary_version": "1.0.25-10ubuntu0.16.04.1" }, { "binary_name": "libsndfile1-dbg", "binary_version": "1.0.25-10ubuntu0.16.04.1" }, { "binary_name": "libsndfile1-dbgsym", "binary_version": "1.0.25-10ubuntu0.16.04.1" }, { "binary_name": "libsndfile1-dev", "binary_version": "1.0.25-10ubuntu0.16.04.1" }, { "binary_name": "sndfile-programs", "binary_version": "1.0.25-10ubuntu0.16.04.1" }, { "binary_name": "sndfile-programs-dbg", "binary_version": "1.0.25-10ubuntu0.16.04.1" }, { "binary_name": "sndfile-programs-dbgsym", "binary_version": "1.0.25-10ubuntu0.16.04.1" } ] }