Debian Libmysofa vulnerabilities

CVE-2021-3756 [CRITICAL] CVE-2021-3756: libmysofa - libmysofa is vulnerable to Heap-based Buffer Overflow libmysofa is vulnerable to Heap-based Buffer Overflow Scope: local bookworm: resolved (fixed in 1.2.1~dfsg0-1) bullseye: open forky: resolved (fixed in 1.2.1~dfsg0-1) sid: resolved (fixed in 1.2.1~dfsg0-1) trixie: resolved (fixed in 1.2.1~dfsg0-1)

CVE-2020-36152 [HIGH] CVE-2020-36152: libmysofa - Buffer overflow in readDataVar in hdf/dataobject.c in Symonics libmysofa 0.5 - 1... Buffer overflow in readDataVar in hdf/dataobject.c in Symonics libmysofa 0.5 - 1.1 allows attackers to execute arbitrary code via a crafted SOFA. Scope: local bookworm: resolved (fixed in 1.2~dfsg0-1) bullseye: resolved (fixed in 1.2~dfsg0-1) forky: resolved (fixed in 1.2~dfsg0-1) sid: resolved (fixed in 1.2~dfsg0-1) trixie: resolved (fixed in 1.2~dfsg0-1)

CVE-2020-6860 [HIGH] CVE-2020-6860: libmysofa - libmysofa 0.9.1 has a stack-based buffer overflow in readDataVar in hdf/dataobje... libmysofa 0.9.1 has a stack-based buffer overflow in readDataVar in hdf/dataobject.c during the reading of a header message attribute. Scope: local bookworm: resolved (fixed in 1.0~dfsg0-1) bullseye: resolved (fixed in 1.0~dfsg0-1) forky: resolved (fixed in 1.0~dfsg0-1) sid: resolved (fixed in 1.0~dfsg0-1) trixie: resolved (fixed in 1.0~dfsg0-1)

CVE-2020-36151 [MEDIUM] CVE-2020-36151: libmysofa - Incorrect handling of input data in mysofa_resampler_reset_mem function in the l... Incorrect handling of input data in mysofa_resampler_reset_mem function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and overwriting large memory block. Scope: local bookworm: resolved (fixed in 1.2~dfsg0-1) bullseye: resolved (fixed in 1.2~dfsg0-1) forky: resolved (fixed in 1.2~dfsg0-1) sid: resolved (fixed in 1.2~dfsg0-1) trixie: resolv

CVE-2020-36150 [MEDIUM] CVE-2020-36150: libmysofa - Incorrect handling of input data in loudness function in the libmysofa library 0... Incorrect handling of input data in loudness function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and access to unallocated memory block. Scope: local bookworm: resolved (fixed in 1.2~dfsg0-1) bullseye: resolved (fixed in 1.2~dfsg0-1) forky: resolved (fixed in 1.2~dfsg0-1) sid: resolved (fixed in 1.2~dfsg0-1) trixie: resolved (fixed in 1

CVE-2020-36149 [MEDIUM] CVE-2020-36149: libmysofa - Incorrect handling of input data in changeAttribute function in the libmysofa li... Incorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions (e.g. in embedded environments). Scope: local bookworm: resolved (fixed in 1.2~dfsg0-1) bullsey

CVE-2020-36148 [MEDIUM] CVE-2020-36148: libmysofa - Incorrect handling of input data in verifyAttribute function in the libmysofa li... Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions (e.g. in embedded environments). Scope: local bookworm: resolved (fixed in 1.2~dfsg0-1) bullsey

CVE-2019-16093 [CRITICAL] CVE-2019-16093: libmysofa - Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout i... Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c. Scope: local bookworm: resolved (fixed in 0.8~dfsg0-1) bullseye: resolved (fixed in 0.8~dfsg0-1) forky: resolved (fixed in 0.8~dfsg0-1) sid: resolved (fixed in 0.8~dfsg0-1) trixie: resolved (fixed in 0.8~dfsg0-1)

CVE-2019-16092 [CRITICAL] CVE-2019-16092: libmysofa - Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.... Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c. Scope: local bookworm: resolved (fixed in 0.8~dfsg0-1) bullseye: resolved (fixed in 0.8~dfsg0-1) forky: resolved (fixed in 0.8~dfsg0-1) sid: resolved (fixed in 0.8~dfsg0-1) trixie: resolved (fixed in 0.8~dfsg0-1)

CVE-2019-10672 [CRITICAL] CVE-2019-10672: libmysofa - treeRead in hdf/btree.c in libmysofa before 0.7 does not properly validate multi... treeRead in hdf/btree.c in libmysofa before 0.7 does not properly validate multiplications and additions. Scope: local bookworm: resolved (fixed in 0.6~dfsg0-3) bullseye: resolved (fixed in 0.6~dfsg0-3) forky: resolved (fixed in 0.6~dfsg0-3) sid: resolved (fixed in 0.6~dfsg0-3) trixie: resolved (fixed in 0.6~dfsg0-3)

CVE-2019-16091 [HIGH] CVE-2019-16091: libmysofa - Symonics libmysofa 0.7 has an out-of-bounds read in directblockRead in hdf/fract... Symonics libmysofa 0.7 has an out-of-bounds read in directblockRead in hdf/fractalhead.c. Scope: local bookworm: resolved (fixed in 0.8~dfsg0-1) bullseye: resolved (fixed in 0.8~dfsg0-1) forky: resolved (fixed in 0.8~dfsg0-1) sid: resolved (fixed in 0.8~dfsg0-1) trixie: resolved (fixed in 0.8~dfsg0-1)

CVE-2019-16094 [HIGH] CVE-2019-16094: libmysofa - Symonics libmysofa 0.7 has an invalid read in readOHDRHeaderMessageDataLayout in... Symonics libmysofa 0.7 has an invalid read in readOHDRHeaderMessageDataLayout in hdf/dataobject.c. Scope: local bookworm: resolved (fixed in 0.8~dfsg0-1) bullseye: resolved (fixed in 0.8~dfsg0-1) forky: resolved (fixed in 0.8~dfsg0-1) sid: resolved (fixed in 0.8~dfsg0-1) trixie: resolved (fixed in 0.8~dfsg0-1)

CVE-2019-20063 [HIGH] CVE-2019-20063: libmysofa - hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as ... hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as demonstrated by mysofa2json. Scope: local bookworm: resolved (fixed in 0.8~dfsg0-1) bullseye: resolved (fixed in 0.8~dfsg0-1) forky: resolved (fixed in 0.8~dfsg0-1) sid: resolved (fixed in 0.8~dfsg0-1) trixie: resolved (fixed in 0.8~dfsg0-1)

CVE-2019-16095 [HIGH] CVE-2019-16095: libmysofa - Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c. Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c. Scope: local bookworm: resolved (fixed in 0.8~dfsg0-1) bullseye: resolved (fixed in 0.8~dfsg0-1) forky: resolved (fixed in 0.8~dfsg0-1) sid: resolved (fixed in 0.8~dfsg0-1) trixie: resolved (fixed in 0.8~dfsg0-1)

CVE-2019-20016 [MEDIUM] CVE-2019-20016: libmysofa - libmysofa before 2019-11-24 does not properly restrict recursive function calls,... libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack consumption in readOHDRHeaderMessageDatatype in dataobject.c and directblockRead in fractalhead.c. NOTE: a download of v0.9 after 2019-12-06 should fully remediate this issue. Scope: local bookworm: resolved (fixed in 0.9~dfsg0-1) bullseye: resolv