CVE-2019-3832Out-of-bounds Read in Libsndfile

CWE-125Out-of-bounds Read11 documents8 sources
Severity
5.5MEDIUMNVD
OSV9.8OSV6.5
EPSS
0.1%
top 71.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMar 21
Latest updateMay 13

Description

It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this flaw to make the application crash.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages7 packages

debiandebian/libsndfile< libsndfile 1.0.28-6 (bookworm)
Debianlibsndfile_project/libsndfile< 1.0.28-6+3
Ubuntulibsndfile_project/libsndfile< 1.0.25-10ubuntu0.16.04.3+1

Also affects: Debian Linux 9.0, Ubuntu Linux 16.04, 18.04, 18.10

Patches

🔴Vulnerability Details

3
GHSA
GHSA-cj6v-7q57-mrf3: It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of a buffer in wav_write_header()2022-05-13
OSV
libsndfile vulnerabilities2021-01-26
OSV
CVE-2019-3832: It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of a buffer in wav_write_header()2019-03-21

📋Vendor Advisories

5
Ubuntu
libsndfile vulnerabilities2021-01-26
Ubuntu
libsndfile vulnerabilities2019-06-10
Microsoft
It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this 2019-03-12
Red Hat
libsndfile: incomplete fix for CVE-2018-19758 still allow to read beyond buffer limits2019-02-07
Debian
CVE-2019-3832: libsndfile - It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and s...2019

💬Community

2
Bugzilla
CVE-2019-3832 libsndfile: incomplete fix for CVE-2018-19758 still allow to read beyond buffer limits2019-02-14
Bugzilla
CVE-2019-3832 libsndfile: incomplete fix for CVE-2018-19758 still allow to read beyond buffer limits [fedora-all]2019-02-14