Most recent entries from all

ALSA-2020:1636 — Moderate: libsndfile security update

Affected: AlmaLinux:8: libsndfile-devel

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.

Security Fix(es):

* libsndfile: stack-based buffer overflow in sndfile-deinterleave utility (CVE-2018-13139)

* libsndfile: buffer over-read in the function i2alaw_array in alaw.c (CVE-2018-19662)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2021-03767

Withdrawn: BELL-CVE-2018-19662 — CVE-2018-19662 does not affect BellSoft software

Withdrawn by the publisher.

cnvd-2019-00815

EUVD-2026-69912

fkie_cve-2018-19662

An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alaw_array in alaw.c that will lead to a denial of service.

GHSA-2pw9-xw4m-4w44

An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alaw_array in alaw.c that will lead to a denial of service.

gsd-2018-19662

msrc_CVE-2018-19662 — An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alaw_array in alaw.c that w…

msrc_CVE-2018-19662

RHSA-2020:1636 — Red Hat Security Advisory: libsndfile security update

libsndfile: stack-based buffer overflow in sndfile-deinterleave utility libsndfile: buffer over-read in the function i2alaw_array in alaw.c

UBUNTU-CVE-2018-19662

Affected: Ubuntu:Pro:14.04:LTS: libsndfile, Ubuntu:16.04:LTS: libsndfile, Ubuntu:18.04:LTS: libsndfile

An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alaw_array in alaw.c that will lead to a denial of service.