It was discovered that libsndfile incorrectly handled certain malformed files. A remote attacker could use this issue to cause libsndfile to crash, resulting in a denial of service, or possibly execute arbitrary code.
{ "binaries": [ { "binary_name": "libsndfile1", "binary_version": "1.0.25-10ubuntu0.16.04.2" }, { "binary_name": "libsndfile1-dbg", "binary_version": "1.0.25-10ubuntu0.16.04.2" }, { "binary_name": "libsndfile1-dbgsym", "binary_version": "1.0.25-10ubuntu0.16.04.2" }, { "binary_name": "libsndfile1-dev", "binary_version": "1.0.25-10ubuntu0.16.04.2" }, { "binary_name": "sndfile-programs", "binary_version": "1.0.25-10ubuntu0.16.04.2" }, { "binary_name": "sndfile-programs-dbg", "binary_version": "1.0.25-10ubuntu0.16.04.2" }, { "binary_name": "sndfile-programs-dbgsym", "binary_version": "1.0.25-10ubuntu0.16.04.2" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "libsndfile1", "binary_version": "1.0.28-4ubuntu0.18.04.1" }, { "binary_name": "libsndfile1-dbgsym", "binary_version": "1.0.28-4ubuntu0.18.04.1" }, { "binary_name": "libsndfile1-dev", "binary_version": "1.0.28-4ubuntu0.18.04.1" }, { "binary_name": "sndfile-programs", "binary_version": "1.0.28-4ubuntu0.18.04.1" }, { "binary_name": "sndfile-programs-dbgsym", "binary_version": "1.0.28-4ubuntu0.18.04.1" } ], "availability": "No subscription required" }