Alerts This Week
Warning Icon 1 631
Alerts This Week
Warning Icon 1 631

Mageia 6: MGASA-2019-0182 Critical: libsndfile Denial of Service

mageia
Calendar Grey May 19, 2019
Dist Mageia Esm H88
Buffer overflow in libsndfile results in service disruption; Mageia patch addresses urgent vulnerability.
A heap-based buffer over-read at wav.c in wav_write_header that could be used for a denial of service attack (CVE-2018-19758)

Summary

A heap-based buffer over-read at wav.c in wav_write_header that could be used for a denial of service attack (CVE-2018-19758).

References

- https://bugs.mageia.org/show_bug.cgi?id=24752

- http://lists.suse.com/pipermail/sle-security-updates/2019-April/005286.html

- https://www.cve.org/CVERecord?id=CVE-2018-19758

Resolution

SRPMS

- 6/core/libsndfile-1.0.28-3.4.mga6

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 19 May 2019
URL: https://advisories.mageia.org/MGASA-2019-0182.html
Type: security
CVE: CVE-2018-19758

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here