Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-16942

Опубликовано: 25 нояб. 2017
Источник: redhat
CVSS3: 4.3

Описание

In libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists in the function wav_w64_read_fmt_chunk() in wav_w64.c, which may lead to DoS when playing a crafted audio file.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6libsndfileWill not fix
Red Hat Enterprise Linux 7libsndfileWill not fix

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-369
https://bugzilla.redhat.com/show_bug.cgi?id=1517902libsndfile: divide-by-zero error in wav_w64_read_fmt_chunk()

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 9 лет назад

In libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists in the function wav_w64_read_fmt_chunk() in wav_w64.c, which may lead to DoS when playing a crafted audio file.

CVSS3: 6.5
nvd
почти 9 лет назад

In libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists in the function wav_w64_read_fmt_chunk() in wav_w64.c, which may lead to DoS when playing a crafted audio file.

CVSS3: 6.5
debian
почти 9 лет назад

In libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists ...

CVSS3: 6.5
github
больше 4 лет назад

In libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists in the function wav_w64_read_fmt_chunk() in wav_w64.c, which may lead to DoS when playing a crafted audio file.

suse-cvrf
почти 9 лет назад

Recommended update for libsndfile

4.3 Medium

CVSS3