Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2022:0052-1

Опубликовано: 11 янв. 2022
Источник: suse-cvrf

Описание

Security update for libsndfile

This update for libsndfile fixes the following issues:

  • CVE-2021-4156: Fixed heap buffer overflow in flac_buffer_copy that could potentially lead to heap exploitation (bsc#1194006).

Список пакетов

openSUSE Leap 15.3
libsndfile-devel-1.0.28-5.15.1
libsndfile-progs-1.0.28-5.15.1
libsndfile1-1.0.28-5.15.1
libsndfile1-32bit-1.0.28-5.15.1

Ссылки

Описание

An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a specially crafted file (via tricking a user to open or otherwise) to an application linked with libsndfile and using the FLAC codec, could trigger an out-of-bounds read that would most likely cause a crash but could potentially leak memory information that could be used in further exploitation of other flaws.

Затронутые продукты
openSUSE Leap 15.3:libsndfile-devel-1.0.28-5.15.1
openSUSE Leap 15.3:libsndfile-progs-1.0.28-5.15.1
openSUSE Leap 15.3:libsndfile1-1.0.28-5.15.1
openSUSE Leap 15.3:libsndfile1-32bit-1.0.28-5.15.1
Ссылки