Buffer Overflow in Audio File Library Affects Users of libaudiofile
CVE-2015-7747

8.8HIGH

Key Information:

Vendor
Canonical
Status
Ubuntu Linux
Fedora
Vendor
CVE Published:
19 February 2020

Summary

A buffer overflow vulnerability exists in the afReadFrames function of the Audio File Library (libaudiofile). This flaw can be exploited by remote attackers to induce a denial of service, such as causing the application to crash, or in certain scenarios, to execute arbitrary code by convincing users to open a specially crafted audio file. This issue highlights the importance of validating input data in software processing audio files to mitigate risks.

References

http://www.ubuntu.com/usn/USN-2787-1
x_refsource_MISC
https://bugs.launchpad.net/ubuntu/+source/audiofile/+bug/...
x_refsource_MISC
http://www.openwall.com/lists/oss-security/2015/10/06/2
x_refsource_MISC

EPSS Score

40% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.