SB2017070523 - Heap-based buffer overflow in libsndfile (Alpine package) 

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2017070523

SB2017070523 - Heap-based buffer overflow in libsndfile (Alpine package)

Published: July 5, 2017

Security Bulletin ID SB2017070523
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Heap-based buffer overflow (CVE-ID: CVE-2017-8363)

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to heap-based buffer over-read in the flac_buffer_copy function in flac.c in libsndfile. A remote attacker can send a specially crafted audio file, trick the victim into opening it, trigger memory corruption and cause the application to crash.

Successful exploitation of the vulnerability results in denial of service.

Remediation

Install update from vendor's website.

References