VDB

GCVE-110-MAGEIA-2015-15

GCVE-110-MAGEIA-2015-15
Advisory Published
Vulnetix · Advisory published January 8, 2015
Updated libsndfile packages fix security vulnerabilities: libsndfile contains multiple buffer-overflow vulnerabilities in src/sd2.c because it fails to properly bounds-check user supplied input, which may allow an attacker to execute arbitrary code or cause a denial of service (CVE-2014-9496). libsndfile contains a divide-by-zero error in src/file_io.c which may allow an attacker to cause a denial of service.

Affected Products

VendorProductVersionsPlatforms
Mageialibsndfile0 (affected), 1.0.25-3.1.mga4 (unaffected)—

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›