In libsamplerate before 0.1.9, a buffer over-read occurs in the calc_output_single function in src_sinc.c via a crafted audio file.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In libsamplerate before 0.1.9, a buffer over-read occurs in the calc_output_single function in src_sinc.c     via a crafted audio file. (CVE-2017-7697)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5749-1 advisory.

    Erik de Castro Lopo and Agostino Sarubbo discovered that libsamplerate did not properly perform bounds     checking. If a user were tricked into processing a specially crafted audio file, an attacker could     possibly use this issue to cause a crash.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2845 advisory.

    An issue has been found in libsamplerate, an audio sample rate conversion library. Using a crafted audio     file a buffer over-read might happen in calc_output_single() in src_sinc.c. For Debian 9 stretch, this     problem has been fixed in version 0.1.8-8+deb9u1. We recommend that you upgrade your libsamplerate     packages. For the detailed security status of libsamplerate please refer to its security tracker page at:
    https://security-tracker.debian.org/tracker/libsamplerate Further information about Debian LTS security     advisories, how to apply these updates to your system and frequently asked questions can be found at:
    https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the libsamplerate package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In libsamplerate before 0.1.9, a buffer over-read     occurs in the calc_output_single function in src_sinc.c     via a crafted audio file.(CVE-2017-7697)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New upstream bug fix release. This version includes a fix for CVE-2017-7697.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

NVD reports :

In libsamplerate before 0.1.9, a buffer over-read occurs in the calc_output_single function in src_sinc.c via a crafted audio file.

This update for libsamplerate fixes the following issues :

  - CVE-2017-7697: Fixed a buffer overflow in     calc_output_single. (bsc#1033564)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
221552	Linux Distros Unpatched Vulnerability : CVE-2017-7697	Nessus	Misc.	medium
168279	Ubuntu 16.04 ESM : libsamplerate vulnerability (USN-5749-1)	Nessus	Ubuntu Local Security Checks	medium
156159	Debian DLA-2845-1 : libsamplerate - LTS security update	Nessus	Debian Local Security Checks	medium
132150	EulerOS 2.0 SP3 : libsamplerate (EulerOS-SA-2019-2615)	Nessus	Huawei Local Security Checks	medium
131890	EulerOS 2.0 SP2 : libsamplerate (EulerOS-SA-2019-2398)	Nessus	Huawei Local Security Checks	medium
130879	EulerOS 2.0 SP5 : libsamplerate (EulerOS-SA-2019-2170)	Nessus	Huawei Local Security Checks	medium
107159	Fedora 26 : libsamplerate (2018-2012089e37)	Nessus	Fedora Local Security Checks	medium
107029	Fedora 27 : libsamplerate (2018-418e67c843)	Nessus	Fedora Local Security Checks	medium
99558	FreeBSD : libsamplerate -- multiple vulnerabilities (d44129d6-b22e-4e9c-b200-6a46e8bd3e60)	Nessus	FreeBSD Local Security Checks	medium
99508	SUSE SLES11 Security Update : libsamplerate (SUSE-SU-2017:1065-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2017-7697

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium