Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:1559-1

Опубликовано: 15 мая 2025
Источник: suse-cvrf

Описание

Security update for audiofile

This update for audiofile fixes the following issues:

  • CVE-2019-13147: Fixed NULL pointer dereference in ulaw2linear_buf that could lead to DOS (bsc#1140031).
  • CVE-2022-24599: unverified user input when processing audio files can lead to information leak (bsc#1196487).

Список пакетов

SUSE Linux Enterprise Module for Desktop Applications 15 SP6
audiofile-devel-0.3.6-150000.3.12.1
libaudiofile1-0.3.6-150000.3.12.1
openSUSE Leap 15.6
audiofile-0.3.6-150000.3.12.1
audiofile-devel-0.3.6-150000.3.12.1
audiofile-devel-32bit-0.3.6-150000.3.12.1
audiofile-doc-0.3.6-150000.3.12.1
libaudiofile1-0.3.6-150000.3.12.1
libaudiofile1-32bit-0.3.6-150000.3.12.1

Ссылки

Описание

In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.

Затронутые продукты
SUSE Linux Enterprise Module for Desktop Applications 15 SP6:audiofile-devel-0.3.6-150000.3.12.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libaudiofile1-0.3.6-150000.3.12.1
openSUSE Leap 15.6:audiofile-0.3.6-150000.3.12.1
openSUSE Leap 15.6:audiofile-devel-0.3.6-150000.3.12.1
Ссылки

Описание

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero bytes to truncate the data.

Затронутые продукты
SUSE Linux Enterprise Module for Desktop Applications 15 SP6:audiofile-devel-0.3.6-150000.3.12.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libaudiofile1-0.3.6-150000.3.12.1
openSUSE Leap 15.6:audiofile-0.3.6-150000.3.12.1
openSUSE Leap 15.6:audiofile-devel-0.3.6-150000.3.12.1
Ссылки