Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-14246

Опубликовано: 14 сент. 2017
Источник: redhat
CVSS3: 3.3
EPSS Низкий

Описание

An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6libsndfileWill not fix
Red Hat Enterprise Linux 7libsndfileWill not fix
Red Hat Enterprise Linux 9libsndfileNot affected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=1500007libsndfile: Out-of-bounds read in the function d2ulaw_array()

EPSS

Процентиль: 51%
0.00277
Низкий

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 8.1
ubuntu
почти 8 лет назад

An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values.

CVSS3: 8.1
nvd
почти 8 лет назад

An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values.

CVSS3: 8.1
msrc
больше 4 лет назад

Описание отсутствует

CVSS3: 8.1
debian
почти 8 лет назад

An out of bounds read in the function d2ulaw_array() in ulaw.c of libs ...

CVSS3: 8.1
github
около 3 лет назад

An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values.

EPSS

Процентиль: 51%
0.00277
Низкий

3.3 Low

CVSS3