CVE-2017-7585 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Libsndfile

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory BufferCWE-125 — Out-of-bounds ReadCWE-787 — Out-of-bounds WriteCWE-121 — Stack-based Buffer Overflow18 documents7 sources
Severity
5.5MEDIUMNVD
EPSS
0.3%
top 43.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Libsndfile Project LibsndfileDebian Libsndfile
Timeline
PublishedApr 7
Latest updateMay 17

Description

In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶debiandebian/libsndfile< libsndfile 1.0.27-2 (bookworm)+1
▶Debianlibsndfile_project/libsndfile< 1.0.27-2+7

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

6
GHSA
GHSA-c3h5-xmq3-3g76: In libsndfile before 1↗2022-05-17
▶
GHSA
GHSA-w427-j9xg-4f6g: In libsndfile before 1↗2022-05-17
▶
GHSA
GHSA-2933-mrxr-9gj9: In libsndfile before 1↗2022-05-17
▶
OSV
CVE-2017-7741: In libsndfile before 1↗2017-04-12
▶
OSV
CVE-2017-7742: In libsndfile before 1↗2017-04-12
▶

📋Vendor Advisories

7
Ubuntu
libsndfile vulnerabilities↗2017-06-01
▶
Red Hat
libsndfile: Invalid memory read in flac_buffer_copy function↗2017-04-11
▶
Red Hat
libsndfile: Invalid memory write in flac_buffer_copy function↗2017-04-11
▶
Red Hat
libsndfile: Stack-based buffer overflow in flac_buffer_copy()↗2017-03-24
▶
Debian
CVE-2017-7741: libsndfile - In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac...↗2017
▶

💬Community

2
Bugzilla
CVE-2017-7585 libsndfile: Stack-based buffer overflow in flac_buffer_copy()↗2017-04-10
▶
Bugzilla
CVE-2017-7585 CVE-2017-7586 libsndfile: various flaws [fedora-all]↗2017-04-10
▶