Most recent entries from all

ALSA-2024:2184 — Moderate: libsndfile security update

Affected: AlmaLinux:9: libsndfile, AlmaLinux:9: libsndfile-devel, AlmaLinux:9: libsndfile-utils

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.

Security Fix(es):

* libsndfile: integer overflow in src/mat4.c and src/au.c leads to DoS (CVE-2022-33065)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2025-03968

EUVD-2026-198185

fkie_cve-2022-33065

Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.

GHSA-q72h-h33r-r8j8

gsd-2022-33065

msrc_CVE-2022-33065 — Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_heade…

msrc_CVE-2022-33065

OESA-2024-2157 — libsndfile security update

Affected: openEuler:24.03-LTS: libsndfile

Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface. Security Fix(es): Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.(CVE-2022-33065)

openSUSE-SU-2024:13348-1 — libsndfile-devel-1.2.2-1.1 on GA media

libsndfile-devel-1.2.2-1.1 on GA media

SUSE-SU-2023:4331-1 — Security update for libsndfile

Security update for libsndfile

UBUNTU-CVE-2022-33065

Affected: Ubuntu:Pro:14.04:LTS: libsndfile, Ubuntu:Pro:16.04:LTS: libsndfile, Ubuntu:Pro:18.04:LTS: libsndfile, Ubuntu:20.04:LTS: libsndfile, Ubuntu:22.04:LTS: libsndfile

WID-SEC-W-2023-1906 — libsndfile: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in libsndfile ausnutzen, um beliebigen Code auszuführen, einen 'Denial of Service'-Zustand herbeizuführen oder einen nicht spezifizierten Angriff durchzuführen.