[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

251782

 
 

909

 
 

196543

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2018:0352-1 -- SLES libsndfile

ID: oval:org.secpod.oval:def:89002334Date: (C)2021-02-25   (M)2024-04-17
Class: PATCHFamily: unix




This update for libsndfile fixes the following issues: - CVE-2017-16942: Divide-by-zero in the function wav_w64_read_fmt_chunk, which may lead to Denial of service . - CVE-2017-6892: Fixed an out-of-bounds read memory access in the aiff_read_chanmap . - CVE-2017-14634: In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init in double64.c, which may lead to DoS when playing a crafted audio file. - CVE-2017-14245: An out of bounds read in the function d2alaw_array in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values. - CVE-2017-14246: An out of bounds read in the function d2ulaw_array in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values.

Platform:
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP2
Product:
libsndfile
Reference:
SUSE-SU-2018:0352-1
CVE-2017-14245
CVE-2017-14246
CVE-2017-14634
CVE-2017-16942
CVE-2017-6892
CVE    5
CVE-2017-16942
CVE-2017-14634
CVE-2017-14246
CVE-2017-14245
...

© SecPod Technologies