Red Hat Security Advisory

RHSA-2021:3295

libsndfile security update

Released 2021-08-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) libsndfile-1.0.25-12.el7_9.1
Red Hat Enterprise Linux Client Optional (v. 7) libsndfile-devel-1.0.25-12.el7_9.1, libsndfile-utils-1.0.25-12.el7_9.1
Red Hat Enterprise Linux ComputeNode Optional (v. 7) libsndfile-devel-1.0.25-12.el7_9.1, libsndfile-utils-1.0.25-12.el7_9.1
Red Hat Enterprise Linux Server (v. 7) libsndfile-1.0.25-12.el7_9.1, libsndfile-1.0.25-12.el7_9.1.ppc
Red Hat Enterprise Linux Server Optional (v. 7) libsndfile-devel-1.0.25-12.el7_9.1, libsndfile-devel-1.0.25-12.el7_9.1.ppc, libsndfile-utils-1.0.25-12.el7_9.1
Red Hat Enterprise Linux Workstation (v. 7) libsndfile-1.0.25-12.el7_9.1
Red Hat Enterprise Linux Workstation Optional (v. 7) libsndfile-devel-1.0.25-12.el7_9.1, libsndfile-utils-1.0.25-12.el7_9.1

TI-2021-02284 CVE-2021-3246 · GHSA-p3g4-4phf-g392

MEDIUM 44

A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03116 Published 2021-07-20 Partial fix CWE-787