CVE-2017-16942 PUBLISHED

In libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists in the function wav_w64_read_fmt_chunk() in wav_w64.c, which may lead to DoS when playing a crafted audio file.

EPSS 0.28% · 51.6th percentile

Risk Scores

EPSS Score
0.28%
51.6th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlibsndfile0, 1.0.25-9.1, 1.0.25-10
Ubuntu:Pro:14.04:LTSlibsndfile0, 1.0.25-7ubuntu2.2, 1.0.25-7ubuntu1

Timeline

References

Open in Interactive Console →