OPENSUSE-SU-2021:1166-1: libsndfile-progs&distro=openSUSE Leap 15.2 openSUSE
Vulnerability summary
OPENSUSE-SU-2021:1166-1 is a vulnerability in libsndfile-progs&distro=openSUSE Leap 15.2 openSUSE with no CVSS score yet.
Advisory lineage
Upstream 4 · Downstream 0 · Related 4Timeline
- 19-08-2021PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for libsndfile This update for libsndfile fixes the following issues: - CVE-2018-13139: Fixed a stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact. (bsc#1100167) - CVE-2018-19432: Fixed a NULL pointer dereference in the function sf_write_int in sndfile.c, which will lead to a denial of service. (bsc#1116993) - CVE-2021-3246: Fixed a heap buffer overflow vulnerability in msadpcm_decode_block. (bsc#1188540) - CVE-2018-19758: Fixed a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a denial of service. (bsc#1117954) This update was imported from the SUSE:SLE-15:Update update project.
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Opensuse2 products
- libsndfile-progs&distro=openSUSE Leap 15.2< 1.0.28-lp152.6.3.1
- libsndfile&distro=openSUSE Leap 15.2< 1.0.28-lp152.6.3.1
1 vendor · 2 products
References
9 links- lists.opensuse.org/archives/…Advisory