Wind River Support Network

HomeDefectsLIN1018-639

Fixed

LIN1018-639 : Security Advisory - libsndfile - CVE-2017-17457

Created: May 14, 2018 Updated: Mar 7, 2019

Resolved Date: Feb 25, 2019

Found In Version: unknown

Fix Version: 10.18.44.4

Severity: Standard

Applicable for: Wind River Linux LTS 18

Component/s: Userspace

Description

The function d2ulaw_array() in ulaw.c of libsndfile 1.0.29pre1 may lead to a remote DoS attack (SEGV on unknown address 0x000000000000), a different vulnerability than CVE-2017-14246.

https://nvd.nist.gov/vuln/detail/CVE-2017-17457

CVEs

CVE-2017-17457