Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2017:1427-1

Опубликовано: 27 мая 2017
Источник: suse-cvrf

Описание

Security update for libsndfile

This update for libsndfile fixes the following issues:

  • CVE-2017-8361: Global buffer overflow in flac_buffer_copy. (bsc#1036946)
  • CVE-2017-8362: Invalid memory read in flac_buffer_copy. (bsc#1036943)
  • CVE-2017-8363: Heap-based buffer overflow in flac_buffer_copy. (bsc#1036945)
  • CVE-2017-7585, CVE-2017-7741, CVE-2017-7742: Stack-based buffer overflows via specially crafted FLAC files. (bsc#1033054)

This update was imported from the SUSE:SLE-12:Update update project.

Список пакетов

openSUSE Leap 42.2
libsndfile-1.0.25-26.6.1
libsndfile-devel-1.0.25-26.6.1
libsndfile-progs-1.0.25-26.6.1
libsndfile1-1.0.25-26.6.1
libsndfile1-32bit-1.0.25-26.6.1

Ссылки

Описание

In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file.

Затронутые продукты
openSUSE Leap 42.2:libsndfile-1.0.25-26.6.1
openSUSE Leap 42.2:libsndfile-devel-1.0.25-26.6.1
openSUSE Leap 42.2:libsndfile-progs-1.0.25-26.6.1
openSUSE Leap 42.2:libsndfile1-1.0.25-26.6.1
Ссылки

Описание

In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with write memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585.

Затронутые продукты
openSUSE Leap 42.2:libsndfile-1.0.25-26.6.1
openSUSE Leap 42.2:libsndfile-devel-1.0.25-26.6.1
openSUSE Leap 42.2:libsndfile-progs-1.0.25-26.6.1
openSUSE Leap 42.2:libsndfile1-1.0.25-26.6.1
Ссылки

Описание

In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with read memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585.

Затронутые продукты
openSUSE Leap 42.2:libsndfile-1.0.25-26.6.1
openSUSE Leap 42.2:libsndfile-devel-1.0.25-26.6.1
openSUSE Leap 42.2:libsndfile-progs-1.0.25-26.6.1
openSUSE Leap 42.2:libsndfile1-1.0.25-26.6.1
Ссылки

Описание

The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file.

Затронутые продукты
openSUSE Leap 42.2:libsndfile-1.0.25-26.6.1
openSUSE Leap 42.2:libsndfile-devel-1.0.25-26.6.1
openSUSE Leap 42.2:libsndfile-progs-1.0.25-26.6.1
openSUSE Leap 42.2:libsndfile1-1.0.25-26.6.1
Ссылки

Описание

The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted audio file.

Затронутые продукты
openSUSE Leap 42.2:libsndfile-1.0.25-26.6.1
openSUSE Leap 42.2:libsndfile-devel-1.0.25-26.6.1
openSUSE Leap 42.2:libsndfile-progs-1.0.25-26.6.1
openSUSE Leap 42.2:libsndfile1-1.0.25-26.6.1
Ссылки

Описание

The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file.

Затронутые продукты
openSUSE Leap 42.2:libsndfile-1.0.25-26.6.1
openSUSE Leap 42.2:libsndfile-devel-1.0.25-26.6.1
openSUSE Leap 42.2:libsndfile-progs-1.0.25-26.6.1
openSUSE Leap 42.2:libsndfile1-1.0.25-26.6.1
Ссылки

Описание

The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file.

Затронутые продукты
openSUSE Leap 42.2:libsndfile-1.0.25-26.6.1
openSUSE Leap 42.2:libsndfile-devel-1.0.25-26.6.1
openSUSE Leap 42.2:libsndfile-progs-1.0.25-26.6.1
openSUSE Leap 42.2:libsndfile1-1.0.25-26.6.1
Ссылки
Уязвимость openSUSE-SU-2017:1427-1