It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this flaw to make the application crash.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulaw_array in
    ulaw.c that will lead to a denial of service. (CVE-2018-19661)

  - An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alaw_array in
    alaw.c that will lead to a denial of service. (CVE-2018-19662)

  - There is a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a
    denial of service. (CVE-2018-19758)

  - It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond
    the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this flaw to make
    the application crash. (CVE-2019-3832)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - There is a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a
    denial of service. (CVE-2018-19758)

  - It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond
    the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this flaw to make
    the application crash. (CVE-2019-3832)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond     the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this flaw to make     the application crash. (CVE-2019-3832)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the version of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - It was discovered the fix for CVE-2018-19758     (libsndfile) was not complete and still allows a read     beyond the limits of a buffer in wav_write_header()     function in wav.c. A local attacker may use this flaw     to make the application crash.(CVE-2019-3832)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4704-1 advisory.

    It was discovered that libsndfile incorrectly handled certain malformed files. A remote attacker could use     this issue to cause libsndfile to crash, resulting in a denial of service, or possibly execute arbitrary     code. (CVE-2017-12562)

    It was discovered that libsndfile incorrectly handled certain malformed files. A remote attacker could use     this issue to cause libsndfile to crash, resulting in a denial of service, or possibly execute arbitrary     code. This issue only affected Ubuntu 14.04 ESM. (CVE-2017-14245, CVE-2017-14246, CVE-2017-14634,     CVE-2017-16942, CVE-2017-6892, CVE-2018-13139, CVE-2018-19432, CVE-2018-19661, CVE-2018-19662,     CVE-2018-19758, CVE-2019-3832)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the version of the libsndfile package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - It was discovered the fix for CVE-2018-19758     (libsndfile) was not complete and still allows a read     beyond the limits of a buffer in wav_write_header()     function in wav.c. A local attacker may use this flaw     to make the application crash.(CVE-2019-3832)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several issues have been found in libsndfile, a library for reading/writing audio files. All issues are basically divide by zero errors, heap read overflows or other buffer overlow errors.

For Debian 9 stretch, these problems have been fixed in version 1.0.27-3+deb9u1.

We recommend that you upgrade your libsndfile packages.

For the detailed security status of libsndfile please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/libsndfile

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - It was discovered the fix for CVE-2018-19758     (libsndfile) was not complete and still allows a read     beyond the limits of a buffer in wav_write_header()     function in wav.c. A local attacker may use this flaw     to make the application crash.(CVE-2019-3832)

  - An issue was discovered in libsndfile 1.0.28. There is     a NULL pointer dereference in the function sf_write_int     in sndfile.c, which will lead to a denial of     service.(CVE-2018-19432)

  - There is a heap-based buffer over-read at wav.c in     wav_write_header in libsndfile 1.0.28 that will cause a     denial of service.(CVE-2018-19758)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202007-65 (libsndfile: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in libsndfile. Please       review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

According to the versions of the libsndfile package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - Heap-based Buffer Overflow in the psf_binheader_writef     function in common.c in libsndfile through 1.0.28     allows remote attackers to cause a denial of service     (application crash) or possibly have unspecified other     impact.(CVE-2017-12562)

  - It was discovered the fix for CVE-2018-19758     (libsndfile) was not complete and still allows a read     beyond the limits of a buffer in wav_write_header()     function in wav.c. A local attacker may use this flaw     to make the application crash.(CVE-2019-3832)

  - An issue was discovered in libsndfile 1.0.28. There is     a buffer over-read in the function i2alaw_array in     alaw.c that will lead to a denial of     service.(CVE-2018-19662)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4013-1 advisory.

    It was discovered that libsndfile incorrectly handled certain malformed files. A remote attacker could use     this issue to cause libsndfile to crash, resulting in a denial of service, or possibly execute arbitrary     code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It was found that the fix for CVE-2018-19758 was incomplete. That has been addressed in this update. The description for CVE-2018-19758 follows :

A heap-buffer-overflow vulnerability was discovered in libsndfile, the library for reading and writing files containing sampled sound. This flaw might be triggered by remote attackers to cause denial of service (out of bounds read and application crash).

For Debian 8 'Jessie', this problem has been fixed in version 1.0.25-9.1+deb8u4.

We recommend that you upgrade your libsndfile packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
435802	Alpine: libsndfile: security update to 1.0.28-r5	Tenable Cloud Security	Alpine Linux Local Security Checks	high
435802	Alpine: libsndfile: security update to 1.0.28-r5	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
424056	Alpine: multiple libsndfile packages: security update to 1.0.28-r8	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
424056	Alpine: multiple libsndfile packages: security update to 1.0.28-r8	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
424054	Alpine: multiple libsndfile packages: security update to 1.0.28-r6	Tenable Cloud Security	Alpine Linux Local Security Checks	high
424054	Alpine: multiple libsndfile packages: security update to 1.0.28-r6	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
222875	Linux Distros Unpatched Vulnerability : CVE-2019-3832	Nessus	Misc.	medium
405295	Alpine: multiple libsndfile packages: security update to 1.0.28-r6	Tenable Cloud Security	Alpine Linux Local Security Checks	high
405295	Alpine: multiple libsndfile packages: security update to 1.0.28-r6	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
405294	Alpine: libsndfile: security update to 1.0.28-r5	Tenable Cloud Security	Alpine Linux Local Security Checks	high
405294	Alpine: libsndfile: security update to 1.0.28-r5	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
146681	EulerOS 2.0 SP2 : libsndfile (EulerOS-SA-2021-1319)	Nessus	Huawei Local Security Checks	medium
145464	Ubuntu 16.04 LTS : libsndfile vulnerabilities (USN-4704-1)	Nessus	Ubuntu Local Security Checks	critical
142545	EulerOS Virtualization 3.0.6.6 : libsndfile (EulerOS-SA-2020-2469)	Nessus	Huawei Local Security Checks	medium
142107	Debian DLA-2418-1 : libsndfile security update	Nessus	Debian Local Security Checks	high
142084	EulerOS 2.0 SP5 : libsndfile (EulerOS-SA-2020-2254)	Nessus	Huawei Local Security Checks	medium
140861	EulerOS 2.0 SP3 : libsndfile (EulerOS-SA-2020-2094)	Nessus	Huawei Local Security Checks	medium
139273	GLSA-202007-65 : libsndfile: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
131516	EulerOS Virtualization for ARM 64 3.0.3.0 : libsndfile (EulerOS-SA-2019-2351)	Nessus	Huawei Local Security Checks	critical
125812	Ubuntu 16.04 LTS / 18.04 LTS : libsndfile vulnerabilities (USN-4013-1)	Nessus	Ubuntu Local Security Checks	high
122827	Debian DLA-1712-1 : libsndfile security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2019-3832

medium

Tenable Plugins

high

high

medium

medium

high

high

medium

high

high

high

high

medium

critical

medium

high

medium

medium

high

critical

high

medium