Wind River Support Network

HomeDefectsLIN6-14768
Fixed

LIN6-14768 : Security Advisory - libsndfile1 - CVE-2018-13139

Created: Jul 16, 2018    Updated: Dec 16, 2018
Resolved Date: Nov 18, 2018
Found In Version: 6.0.0.37
Fix Version: 6.0.0.38
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace

Description

A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file. The vulnerability can be triggered by the executable sndfile-deinterleave.

https://nvd.nist.gov/vuln/detail/CVE-2018-13139

Other Downloads


Live chat
Online