Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:0052-2

Опубликовано: 17 фев. 2022
Источник: suse-cvrf

Описание

Security update for libsndfile

This update for libsndfile fixes the following issues:

  • CVE-2021-4156: Fixed heap buffer overflow in flac_buffer_copy that could potentially lead to heap exploitation (bsc#1194006).

Список пакетов

Container containers/milvus:2.4
libsndfile1-1.0.28-5.15.1
Container containers/open-webui:0
libsndfile1-1.0.28-5.15.1
Container suse/kiosk/firefox-esr:esr
libsndfile1-1.0.28-5.15.1
Container suse/kiosk/pulseaudio:17
libsndfile1-1.0.28-5.15.1
Image SLES15-SP4-SAP-Azure-LI-BYOS
libsndfile1-1.0.28-5.15.1
Image SLES15-SP4-SAP-Azure-LI-BYOS-Production
libsndfile1-1.0.28-5.15.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS
libsndfile1-1.0.28-5.15.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production
libsndfile1-1.0.28-5.15.1
Image SLES15-SP5-SAP-Azure-LI-BYOS
libsndfile1-1.0.28-5.15.1
Image SLES15-SP5-SAP-Azure-LI-BYOS-Production
libsndfile1-1.0.28-5.15.1
Image SLES15-SP5-SAP-Azure-VLI-BYOS
libsndfile1-1.0.28-5.15.1
Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production
libsndfile1-1.0.28-5.15.1
Image SLES15-SP6-SAP-Azure-LI-BYOS
libsndfile1-1.0.28-5.15.1
Image SLES15-SP6-SAP-Azure-LI-BYOS-Production
libsndfile1-1.0.28-5.15.1
Image SLES15-SP6-SAP-Azure-VLI-BYOS
libsndfile1-1.0.28-5.15.1
Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production
libsndfile1-1.0.28-5.15.1
Image SLES15-SP7-SAP-Azure-LI-BYOS-Production
libsndfile1-1.0.28-5.15.1
Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production
libsndfile1-1.0.28-5.15.1
SUSE Linux Enterprise Real Time 15 SP2
libsndfile-devel-1.0.28-5.15.1
libsndfile1-1.0.28-5.15.1

Ссылки

Описание

An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a specially crafted file (via tricking a user to open or otherwise) to an application linked with libsndfile and using the FLAC codec, could trigger an out-of-bounds read that would most likely cause a crash but could potentially leak memory information that could be used in further exploitation of other flaws.

Затронутые продукты
Container containers/milvus:2.4:libsndfile1-1.0.28-5.15.1
Container containers/open-webui:0:libsndfile1-1.0.28-5.15.1
Container suse/kiosk/firefox-esr:esr:libsndfile1-1.0.28-5.15.1
Container suse/kiosk/pulseaudio:17:libsndfile1-1.0.28-5.15.1
Ссылки