Ubuntu 23.10: USN-6558-1 critical: audiofile DoS and memory issues

ubuntu

December 14, 2023

Several security issues were fixed in audiofile.

Summary

Several security issues were fixed in audiofile.

Software Description:

- audiofile: Open-source version of the SGI audiofile library

Details:

It was discovered that audiofile could be made to dereference invalid

memory. If a user or an automated system were tricked into opening a

specially crafted file, an attacker could possibly use this issue to cause

a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu

18.04 LTS. (CVE-2018-13440)

It was discovered that audiofile could be made to write out of bounds. If a

user or an automated system were tricked into opening a specially crafted

file, an attacker could possibly use this issue to cause a denial of

service or execute arbitrary code. This issue only affected Ubuntu 16.04

LTS and Ubuntu 18.04 LTS. (CVE-2018-17095)

It was discovered that audiofile could be made to dereference invalid

memory. If a user or an automated system were tricked into opening a

specially crafted file, an attacker c...

Read the Full Advisory

Topics Covered

security advisory denial of service security update Ubuntu memory leak audiofile

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.10:
   audiofile-tools                 0.3.6-5+deb10u1build0.23.10.1
   libaudiofile1                   0.3.6-5+deb10u1build0.23.10.1

Ubuntu 23.04:
   audiofile-tools                 0.3.6-5+deb10u1build0.23.04.1
   libaudiofile1                   0.3.6-5+deb10u1build0.23.04.1

Ubuntu 22.04 LTS:
   audiofile-tools                 0.3.6-5+deb10u1build0.22.04.1
   libaudiofile1                   0.3.6-5+deb10u1build0.22.04.1

Ubuntu 20.04 LTS:
   audiofile-tools                 0.3.6-5+deb10u1build0.20.04.1
   libaudiofile1                   0.3.6-5+deb10u1build0.20.04.1

Ubuntu 18.04 LTS (Available with Ubuntu Pro):
   audiofile-tools                 0.3.6-4ubuntu0.1~esm1
   libaudiofile1                   0.3.6-4ubuntu0.1~esm1

Ubuntu 16.04 LTS (Available with Ubuntu Pro):
   audiofile-tools                 0.3.6-2ubuntu0.16.04.1+esm1
   libaudiofile1                   0.3.6-2ubuntu0.16.04.1+esm1

Ubuntu 14.04 LTS (Available with Ubuntu Pro):
   audiofile-tools                 0.3.6-2ubuntu0.14.04.3+esm1
   libaudiofile1                   0.3.6-2ubuntu0.14.04.3+esm1

In general, a standard system update will make all the necessary changes.