CVE-2014-9756

medium
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

The psf_fwrite function in file_io.c in libsndfile allows attackers to cause a denial of service (divide-by-zero error and application crash) via unspecified vectors related to the headindex variable.

References

http://lists.opensuse.org/opensuse-updates/2015-11/msg00077.html

http://lists.opensuse.org/opensuse-updates/2015-11/msg00145.html

http://www.openwall.com/lists/oss-security/2014/12/24/3

http://www.openwall.com/lists/oss-security/2015/11/03/9

http://www.ubuntu.com/usn/USN-2832-1

https://github.com/erikd/libsndfile/commit/725c7dbb95bfaf8b4bb7b04820e3a00cceea9ce6

https://github.com/erikd/libsndfile/issues/92

Details

Source: MITRE

Published: 2015-11-19

Updated: 2020-11-20

Type: CWE-369

Risk Information

CVSS v2

Base Score: 5

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Impact Score: 2.9

Exploitability Score: 10

Severity: MEDIUM

Tenable Plugins

View all (11 total)

IDNameProductFamilySeverity
132151EulerOS 2.0 SP3 : libsndfile (EulerOS-SA-2019-2616)NessusHuawei Local Security Checks
critical
131666EulerOS 2.0 SP2 : libsndfile (EulerOS-SA-2019-2513)NessusHuawei Local Security Checks
critical
130670EulerOS 2.0 SP5 : libsndfile (EulerOS-SA-2019-2208)NessusHuawei Local Security Checks
high
88626Slackware 13.37 / 14.0 / 14.1 / current : libsndfile (SSA:2016-039-02)NessusSlackware Local Security Checks
critical
87642SUSE SLED12 / SLES12 Security Update : libsndfile (SUSE-SU-2015:2000-2)NessusSuSE Local Security Checks
high
87239Ubuntu 12.04 LTS / 14.04 LTS / 15.04 / 15.10 : libsndfile vulnerabilities (USN-2832-1)NessusUbuntu Local Security Checks
critical
87111Debian DLA-356-1 : libsndfile security updateNessusDebian Local Security Checks
critical
87084openSUSE Security Update : libsndfile (openSUSE-2015-820)NessusSuSE Local Security Checks
high
86895SUSE SLED12 / SLES12 Security Update : libsndfile (SUSE-SU-2015:2000-1)NessusSuSE Local Security Checks
high
86891openSUSE Security Update : libsndfile (openSUSE-2015-742)NessusSuSE Local Security Checks
high
86869SUSE SLED11 / SLES11 Security Update : libsndfile (SUSE-SU-2015:1979-1)NessusSuSE Local Security Checks
high