Red Hat Security AdvisoryRHSA-2020:1636
libsndfile security update
Released 2020-04-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) libsndfile-devel-1.0.28-10.el8
- Red Hat Enterprise Linux AppStream (v. 8) libsndfile-1.0.28-10.el8
Fixes 2 records
Priority MEDIUM 44
A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.03434 · Published 2018-07-04 · Fixed CWE-787
Priority MEDIUM 40
An issue was discovered in libsndfile 1.0.28.
CVSS 3.0HIGH 8.1· Network · No auth · User interaction · EPSS 0.02312 · Published 2018-11-29 · Partial fix CWE-125
