SUSE-SU-2017:1236-1: libsndfile&distro=SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2017:1236-1 is a vulnerability in libsndfile&distro=SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 7 · Downstream 0 · Related 7Timeline
- 10-05-2017PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for libsndfile This update for libsndfile fixes the following issues: - CVE-2017-8362: invalid memory read in flac_buffer_copy (flac.c) (bsc#1036943) - CVE-2017-8365: global buffer overflow in i2les_array (pcm.c) (bsc#1036946) - CVE-2017-8361: global buffer overflow in flac_buffer_copy (flac.c) (bsc#1036944) - CVE-2017-8363: heap-based buffer overflow in flac_buffer_copy (flac.c) (bsc#1036945) - CVE-2017-7585: stack-based buffer overflow via a specially crafted FLAC file (bsc#1033054)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse3 products
- libsndfile&distro=SUSE Linux Enterprise Server 11 SP4< 1.0.20-2.18.1
- libsndfile&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4< 1.0.20-2.18.1
- libsndfile&distro=SUSE Linux Enterprise Software Development Kit 11 SP4< 1.0.20-2.18.1
1 vendor · 3 products