Red Hat Security AdvisoryRHSA-2020:1185
libsndfile security update
Released 2020-03-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libsndfile-1.0.25-11.el7
- Red Hat Enterprise Linux Client Optional (v. 7) libsndfile-devel-1.0.25-11.el7, libsndfile-utils-1.0.25-11.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) libsndfile-1.0.25-11.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libsndfile-devel-1.0.25-11.el7, libsndfile-utils-1.0.25-11.el7
- Red Hat Enterprise Linux Server (v. 7) libsndfile-1.0.25-11.el7, libsndfile-1.0.25-11.el7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) libsndfile-devel-1.0.25-11.el7, libsndfile-devel-1.0.25-11.el7.ppc, libsndfile-utils-1.0.25-11.el7
- Red Hat Enterprise Linux Workstation (v. 7) libsndfile-1.0.25-11.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) libsndfile-devel-1.0.25-11.el7, libsndfile-utils-1.0.25-11.el7
Fixes 1 record
Priority MEDIUM 44
A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.03434 · Published 2018-07-04 · Fixed CWE-787
