Buffer Overflow Vulnerability in Libsndfile Affects Multiple Applications
CVE-2017-8361

8.8HIGH

Key Information:

Vendor

Libsndfile Project

Status
Libsndfile
Vendor
CVE Published:
30 April 2017

What is CVE-2017-8361?

A vulnerability exists in libsndfile 1.0.28 due to improper handling in the flac_buffer_copy function. This issue allows remote attackers to craft malicious audio files that can lead to a buffer overflow, resulting in potential application crashes and disruption of service. By exploiting this vulnerability, attackers can manipulate audio processing workflows, posing risks to any application or system reliant on this library.

References

https://blogs.gentoo.org/ago/2017/04/29/libsndfile-global...
x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2018/12/msg0...
mailing-listx_refsource_MLIST
https://security.gentoo.org/glsa/201811-23
vendor-advisoryx_refsource_GENTOO

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.