Most recent entries from all

ALSA-2020:1636 — Moderate: libsndfile security update

Affected: AlmaLinux:8: libsndfile-devel

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.

Security Fix(es):

* libsndfile: stack-based buffer overflow in sndfile-deinterleave utility (CVE-2018-13139)

* libsndfile: buffer over-read in the function i2alaw_array in alaw.c (CVE-2018-19662)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2019-01624

Withdrawn: BELL-CVE-2018-13139 — CVE-2018-13139 does not affect BellSoft software

Withdrawn by the publisher.

cnvd-2018-12766

EUVD-2026-66233

fkie_cve-2018-13139

A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file. The vulnerability can be triggered by the executable sndfile-deinterleave.

GHSA-57vh-797h-6g7v

gsd-2018-13139

msrc_CVE-2018-13139 — A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial…

msrc_CVE-2018-13139

openSUSE-SU-2021:1166-1 — Security update for libsndfile

Security update for libsndfile

SUSE-SU-2018:2065-1 — Security update for libsndfile

Security update for libsndfile

UBUNTU-CVE-2018-13139

Affected: Ubuntu:Pro:14.04:LTS: libsndfile, Ubuntu:16.04:LTS: libsndfile, Ubuntu:18.04:LTS: libsndfile