Описание
An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a specially crafted file (via tricking a user to open or otherwise) to an application linked with libsndfile and using the FLAC codec, could trigger an out-of-bounds read that would most likely cause a crash but could potentially leak memory information that could be used in further exploitation of other flaws.
Отчет
This flaw is out of support scope for libsndfile shipped with Red Hat Enterprise Linux 6 and 7.
Меры по смягчению последствий
One way to mitigate the risk of this flaw is to not open untrusted sound files using libsndfile or other linked programs.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | libsndfile | Out of support scope | ||
| Red Hat Enterprise Linux 7 | libsndfile | Out of support scope | ||
| Red Hat Enterprise Linux 9 | libsndfile | Not affected | ||
| Red Hat Enterprise Linux 8 | libsndfile | Fixed | RHSA-2022:1968 | 10.05.2022 |
Показывать по
Дополнительная информация
Статус:
EPSS
7.1 High
CVSS3
Связанные уязвимости
An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a specially crafted file (via tricking a user to open or otherwise) to an application linked with libsndfile and using the FLAC codec, could trigger an out-of-bounds read that would most likely cause a crash but could potentially leak memory information that could be used in further exploitation of other flaws.
An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a specially crafted file (via tricking a user to open or otherwise) to an application linked with libsndfile and using the FLAC codec, could trigger an out-of-bounds read that would most likely cause a crash but could potentially leak memory information that could be used in further exploitation of other flaws.
An out-of-bounds read flaw was found in libsndfile's FLAC codec functi ...
EPSS
7.1 High
CVSS3