Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2017:1236-1

Опубликовано: 10 мая 2017
Источник: suse-cvrf

Описание

Security update for libsndfile

This update for libsndfile fixes the following issues:

  • CVE-2017-8362: invalid memory read in flac_buffer_copy (flac.c) (bsc#1036943)
  • CVE-2017-8365: global buffer overflow in i2les_array (pcm.c) (bsc#1036946)
  • CVE-2017-8361: global buffer overflow in flac_buffer_copy (flac.c) (bsc#1036944)
  • CVE-2017-8363: heap-based buffer overflow in flac_buffer_copy (flac.c) (bsc#1036945)
  • CVE-2017-7585: stack-based buffer overflow via a specially crafted FLAC file (bsc#1033054)

Список пакетов

SUSE Linux Enterprise Server 11 SP4
libsndfile-1.0.20-2.18.1
libsndfile-32bit-1.0.20-2.18.1
libsndfile-x86-1.0.20-2.18.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
libsndfile-1.0.20-2.18.1
libsndfile-32bit-1.0.20-2.18.1
libsndfile-x86-1.0.20-2.18.1
SUSE Linux Enterprise Software Development Kit 11 SP4
libsndfile-devel-1.0.20-2.18.1

Описание

In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file.


Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:libsndfile-1.0.20-2.18.1
SUSE Linux Enterprise Server 11 SP4:libsndfile-32bit-1.0.20-2.18.1
SUSE Linux Enterprise Server 11 SP4:libsndfile-x86-1.0.20-2.18.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:libsndfile-1.0.20-2.18.1

Ссылки

Описание

In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with write memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585.


Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:libsndfile-1.0.20-2.18.1
SUSE Linux Enterprise Server 11 SP4:libsndfile-32bit-1.0.20-2.18.1
SUSE Linux Enterprise Server 11 SP4:libsndfile-x86-1.0.20-2.18.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:libsndfile-1.0.20-2.18.1

Ссылки

Описание

In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with read memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585.


Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:libsndfile-1.0.20-2.18.1
SUSE Linux Enterprise Server 11 SP4:libsndfile-32bit-1.0.20-2.18.1
SUSE Linux Enterprise Server 11 SP4:libsndfile-x86-1.0.20-2.18.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:libsndfile-1.0.20-2.18.1

Ссылки

Описание

The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file.


Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:libsndfile-1.0.20-2.18.1
SUSE Linux Enterprise Server 11 SP4:libsndfile-32bit-1.0.20-2.18.1
SUSE Linux Enterprise Server 11 SP4:libsndfile-x86-1.0.20-2.18.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:libsndfile-1.0.20-2.18.1

Ссылки

Описание

The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted audio file.


Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:libsndfile-1.0.20-2.18.1
SUSE Linux Enterprise Server 11 SP4:libsndfile-32bit-1.0.20-2.18.1
SUSE Linux Enterprise Server 11 SP4:libsndfile-x86-1.0.20-2.18.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:libsndfile-1.0.20-2.18.1

Ссылки

Описание

The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file.


Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:libsndfile-1.0.20-2.18.1
SUSE Linux Enterprise Server 11 SP4:libsndfile-32bit-1.0.20-2.18.1
SUSE Linux Enterprise Server 11 SP4:libsndfile-x86-1.0.20-2.18.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:libsndfile-1.0.20-2.18.1

Ссылки

Описание

The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file.


Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:libsndfile-1.0.20-2.18.1
SUSE Linux Enterprise Server 11 SP4:libsndfile-32bit-1.0.20-2.18.1
SUSE Linux Enterprise Server 11 SP4:libsndfile-x86-1.0.20-2.18.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:libsndfile-1.0.20-2.18.1

Ссылки
Уязвимость SUSE-SU-2017:1236-1