Denial of Service Vulnerability in libsndfile by Erik de Castro Lopo
CVE-2014-9756

Currently unrated

Key Information:

Vendor: Libsndfile Project
Status: Libsndfile
Vendor: CVE Published:; 19 November 2015

🔔 Create Libsndfile Project Vulnerability Alert

What is CVE-2014-9756?

A vulnerability exists in the psf_fwrite function within file_io.c of libsndfile. This issue allows attackers to trigger a denial of service by causing a divide-by-zero error due to variables that handle header indexes. Exploiting this flaw could lead to application crashes, affecting the stability and performance of dependent systems and applications.

References

http://lists.opensuse.org/opensuse-updates/2015-11/msg000...

vendor-advisoryx_refsource_SUSE

https://github.com/erikd/libsndfile/issues/92

x_refsource_CONFIRM

http://www.openwall.com/lists/oss-security/2014/12/24/3

mailing-listx_refsource_MLIST

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 19, 2015
Vulnerability Reserved
Nov 3, 2015

CVE-2014-9756 Data

JSON