Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

fix CVE-2015-7805 libsndfile: Heap overflow vulnerability when parsing specially crafted AIFF header

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The libsndfile package was updated to fix the following security issue :

  - CVE-2014-9756: Fixed a divide by zero problem that can     lead to a Denial of Service (DoS) (bsc#953521).

  - CVE-2015-7805: Fixed heap overflow issue (bsc#953516).

  - CVE-2015-8075: Fixed heap overflow issue (bsc#953519).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The libsndfile package was updated to fix the following security issue :

  - CVE-2014-9756: Fixed a divide by zero problem that can     lead to a Denial of Service (DoS) (bsc#953521).

  - CVE-2015-7805: Fixed heap overflow issue (bsc#953516).

  - CVE-2015-8075: Fixed heap overflow issue (bsc#953519).

The libsndfile package was updated to fix three security issues :

  - CVE-2015-7805: fix for heap overflow via specially     crafted AIFF header (bsc#953516)

  - CVE-2015-8075: fix for out of bounds read access in     function psf_strlcpy_crlf (bsc#953519)

  - CVE-2014-9756: fix a divide-by-zero issue that can lead     to an DoS (bsc#953521)

ID	Name	Product	Family	Severity
89284	Fedora 23 : libsndfile-1.0.25-18.fc23 (2015-71b291686c)	Nessus	Fedora Local Security Checks	high
89140	Fedora 22 : libsndfile-1.0.25-18.fc22 (2015-0be7a2e1b8)	Nessus	Fedora Local Security Checks	high
87642	SUSE SLED12 / SLES12 Security Update : libsndfile (SUSE-SU-2015:2000-2)	Nessus	SuSE Local Security Checks	high
87084	openSUSE Security Update : libsndfile (openSUSE-2015-820)	Nessus	SuSE Local Security Checks	high
86895	SUSE SLED12 / SLES12 Security Update : libsndfile (SUSE-SU-2015:2000-1)	Nessus	SuSE Local Security Checks	high
86891	openSUSE Security Update : libsndfile (openSUSE-2015-742)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2015-8075

No Score

Tenable Plugins

high

high

high

high

high

high