According to the versions of the libsndfile package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - There is a heap-based buffer over-read at wav.c in     wav_write_header in libsndfile 1.0.28 that will cause a     denial of service.(CVE-2018-19758)

  - An issue was discovered in libsndfile 1.0.28. There is     a buffer over-read in the function i2ulaw_array in     ulaw.c that will lead to a denial of     service.(CVE-2018-19661)

  - An issue was discovered in libsndfile 1.0.28. There is     a NULL pointer dereference in the function sf_write_int     in sndfile.c, which will lead to a denial of     service.(CVE-2018-19432)

  - The function d2ulaw_array() in ulaw.c of libsndfile     1.0.29pre1 may lead to a remote DoS attack (SEGV on     unknown address 0x000000000000), a different     vulnerability than CVE-2017-14246.(CVE-2017-17457)

  - The function d2alaw_array() in alaw.c of libsndfile     1.0.29pre1 may lead to a remote DoS attack (SEGV on     unknown address 0x000000000000), a different     vulnerability than CVE-2017-14245.(CVE-2017-17456)

  - In libsndfile 1.0.28, a divide-by-zero error exists in     the function double64_init() in double64.c, which may     lead to DoS when playing a crafted audio     file.(CVE-2017-14634)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4704-1 advisory.

  - In libsndfile version 1.0.28, an error in the aiff_read_chanmap() function (aiff.c) can be exploited to     cause an out-of-bounds read memory access via a specially crafted AIFF file. (CVE-2017-6892)

  - Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through 1.0.28     allows remote attackers to cause a denial of service (application crash) or possibly have unspecified     other impact. (CVE-2017-12562)

  - An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote     DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point     values. (CVE-2017-14245)

  - An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote     DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point     values. (CVE-2017-14246)

  - In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c, which     may lead to DoS when playing a crafted audio file. (CVE-2017-14634)

  - In libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists in the function     wav_w64_read_fmt_chunk() in wav_w64.c, which may lead to DoS when playing a crafted audio file.
    (CVE-2017-16942)

  - A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to     cause a denial of service (application crash) or possibly have unspecified other impact via a crafted     audio file. The vulnerability can be triggered by the executable sndfile-deinterleave. (CVE-2018-13139)

  - An issue was discovered in libsndfile 1.0.28. There is a NULL pointer dereference in the function     sf_write_int in sndfile.c, which will lead to a denial of service. (CVE-2018-19432)

  - An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulaw_array in     ulaw.c that will lead to a denial of service. (CVE-2018-19661)

  - An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alaw_array in     alaw.c that will lead to a denial of service. (CVE-2018-19662)

  - There is a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a     denial of service. (CVE-2018-19758)

  - It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond     the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this flaw to make     the application crash. (CVE-2019-3832)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Multiple vulnerabilities have been found in libsndfile, the library for reading and writing files containing sampled sound.

CVE-2017-8361

The flac_buffer_copy function (flac.c) is affected by a buffer overflow. This vulnerability might be leveraged by remote attackers to cause a denial of service, or possibly have unspecified other impact via a crafted audio file.

CVE-2017-8362

The flac_buffer_copy function (flac.c) is affected by an out-of-bounds read vulnerability. This flaw might be leveraged by remote attackers to cause a denial of service via a crafted audio file.

CVE-2017-8363

The flac_buffer_copy function (flac.c) is affected by a heap based OOB read vulnerability. This flaw might be leveraged by remote attackers to cause a denial of service via a crafted audio file.

CVE-2017-8365

The i2les_array function (pcm.c) is affected by a global buffer overflow. This vulnerability might be leveraged by remote attackers to cause a denial of service, or possibly have unspecified other impact via a crafted audio file.

CVE-2017-14245 CVE-2017-14246 CVE-2017-17456 CVE-2017-17457

The d2alaw_array() and d2ulaw_array() functions (src/ulaw.c and src/alaw.c) are affected by an out-of-bounds read vulnerability. This flaw might be leveraged by remote attackers to cause denial of service or information disclosure via a crafted audio file.

CVE-2017-14634

The double64_init() function (double64.c) is affected by a divide-by-zero error. This vulnerability might be leveraged by remote attackers to cause denial of service via a crafted audio file.

CVE-2018-13139

The psf_memset function (common.c) is affected by a stack-based buffer overflow. This vulnerability might be leveraged by remote attackers to cause a denial of service, or possibly have unspecified other impact via a crafted audio file. The vulnerability can be triggered by the executable sndfile-deinterleave.

CVE-2018-19432

The sf_write_int function (src/sndfile.c) is affected by an out-of-bounds read vulnerability. This flaw might be leveraged by remote attackers to cause a denial of service via a crafted audio file.

CVE-2018-19661 CVE-2018-19662

The i2alaw_array() and i2ulaw_array() functions (src/ulaw.c and src/alaw.c) are affected by an out-of-bounds read vulnerability. This flaw might be leveraged by remote attackers to cause denial of service or information disclosure via a crafted audio file.

For Debian 8 'Jessie', these problems have been fixed in version 1.0.25-9.1+deb8u2.

We recommend that you upgrade your libsndfile packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libsndfile package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - There is a heap-based buffer over-read at wav.c in     wav_write_header in libsndfile 1.0.28 that will cause a     denial of service.(CVE-2018-19758)

  - An out of bounds read in the function d2ulaw_array() in     ulaw.c of libsndfile 1.0.28 may lead to a remote DoS     attack or information disclosure, related to     mishandling of the NAN and INFINITY floating-point     values.(CVE-2018-19661)

  - An issue was discovered in libsndfile 1.0.28. There is     a NULL pointer dereference in the function sf_write_int     in sndfile.c, which will lead to a denial of     service.(CVE-2018-19432)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that libsndfile incorrectly handled certain malformed files. A remote attacker could use this issue to cause libsndfile to crash, resulting in a denial of service, or possibly execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libsndfile: Heap-based Buffer Overflow in psf_binheader_writef function in common.c (CVE-2017-12562)

  - An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote     DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point     values. (CVE-2017-14245)

  - An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote     DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point     values. (CVE-2017-14246)

  - In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c, which     may lead to DoS when playing a crafted audio file. (CVE-2017-14634)

  - In libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists in the function     wav_w64_read_fmt_chunk() in wav_w64.c, which may lead to DoS when playing a crafted audio file.
    (CVE-2017-16942)

  - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14245. Reason: This candidate is a     duplicate of CVE-2017-14245. Notes: All CVE users should reference CVE-2017-14245 instead of this     candidate. All references and descriptions in this candidate have been removed to prevent accidental usage     (CVE-2017-17456)

  - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14246. Reason: This candidate is a     duplicate of CVE-2017-14246. Notes: All CVE users should reference CVE-2017-14246 instead of this     candidate. All references and descriptions in this candidate have been removed to prevent accidental usage     (CVE-2017-17457)

  - In libsndfile version 1.0.28, an error in the aiff_read_chanmap() function (aiff.c) can be exploited to     cause an out-of-bounds read memory access via a specially crafted AIFF file. (CVE-2017-6892)

  - In libsndfile before 1.0.28, an error in the flac_buffer_copy() function (flac.c) can be exploited to     cause a stack-based buffer overflow via a specially crafted FLAC file. (CVE-2017-7585)

  - In libsndfile before 1.0.28, an error in the flac_buffer_copy() function (flac.c) can be exploited to     cause a segmentation violation (with write memory access) via a specially crafted FLAC file during a     resample attempt, a similar issue to CVE-2017-7585. (CVE-2017-7741)

  - In libsndfile before 1.0.28, an error in the flac_buffer_copy() function (flac.c) can be exploited to     cause a segmentation violation (with read memory access) via a specially crafted FLAC file during a     resample attempt, a similar issue to CVE-2017-7585. (CVE-2017-7742)

  - The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of     service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted     audio file. (CVE-2017-8361)

  - The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of     service (invalid read and application crash) via a crafted audio file. (CVE-2017-8362)

  - The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of     service (heap-based buffer over-read and application crash) via a crafted audio file. (CVE-2017-8363)

  - The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of     service (buffer over-read and application crash) via a crafted audio file. (CVE-2017-8365)

  - An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulaw_array in     ulaw.c that will lead to a denial of service. (CVE-2018-19661)

  - An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alaw_array in     alaw.c that will lead to a denial of service. (CVE-2018-19662)

  - There is a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a     denial of service. (CVE-2018-19758)

  - It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond     the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this flaw to make     the application crash. (CVE-2019-3832)

  - A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to     execute arbitrary code via a crafted WAV file. (CVE-2021-3246)

  - An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to     submit a specially crafted file (via tricking a user to open or otherwise) to an application linked with     libsndfile and using the FLAC codec, could trigger an out-of-bounds read that would most likely cause a     crash but could potentially leak memory information that could be used in further exploitation of other     flaws. (CVE-2021-4156)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

Several issues have been found in libsndfile, a library for reading/writing audio files. All issues are basically divide by zero errors, heap read overflows or other buffer overlow errors.

For Debian 9 stretch, these problems have been fixed in version 1.0.27-3+deb9u1.

We recommend that you upgrade your libsndfile packages.

For the detailed security status of libsndfile please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/libsndfile

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libsndfile package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - There is a heap-based buffer over-read at wav.c in     wav_write_header in libsndfile 1.0.28 that will cause a     denial of service.(CVE-2018-19758)

  - An issue was discovered in libsndfile 1.0.28. There is     a buffer over-read in the function i2ulaw_array in     ulaw.c that will lead to a denial of     service.(CVE-2018-19661)

  - An issue was discovered in libsndfile 1.0.28. There is     a NULL pointer dereference in the function sf_write_int     in sndfile.c, which will lead to a denial of     service.(CVE-2018-19432)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libsndfile: Heap-based Buffer Overflow in psf_binheader_writef function in common.c (CVE-2017-12562)

  - An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote     DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point     values. (CVE-2017-14245)

  - An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote     DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point     values. (CVE-2017-14246)

  - In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c, which     may lead to DoS when playing a crafted audio file. (CVE-2017-14634)

  - In libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists in the function     wav_w64_read_fmt_chunk() in wav_w64.c, which may lead to DoS when playing a crafted audio file.
    (CVE-2017-16942)

  - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14245. Reason: This candidate is a     duplicate of CVE-2017-14245. Notes: All CVE users should reference CVE-2017-14245 instead of this     candidate. All references and descriptions in this candidate have been removed to prevent accidental usage     (CVE-2017-17456)

  - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14246. Reason: This candidate is a     duplicate of CVE-2017-14246. Notes: All CVE users should reference CVE-2017-14246 instead of this     candidate. All references and descriptions in this candidate have been removed to prevent accidental usage     (CVE-2017-17457)

  - In libsndfile version 1.0.28, an error in the aiff_read_chanmap() function (aiff.c) can be exploited to     cause an out-of-bounds read memory access via a specially crafted AIFF file. (CVE-2017-6892)

  - In libsndfile before 1.0.28, an error in the flac_buffer_copy() function (flac.c) can be exploited to     cause a stack-based buffer overflow via a specially crafted FLAC file. (CVE-2017-7585)

  - In libsndfile before 1.0.28, an error in the header_read() function (common.c) when handling ID3 tags     can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file. (CVE-2017-7586)

  - In libsndfile before 1.0.28, an error in the flac_buffer_copy() function (flac.c) can be exploited to     cause a segmentation violation (with write memory access) via a specially crafted FLAC file during a     resample attempt, a similar issue to CVE-2017-7585. (CVE-2017-7741)

  - In libsndfile before 1.0.28, an error in the flac_buffer_copy() function (flac.c) can be exploited to     cause a segmentation violation (with read memory access) via a specially crafted FLAC file during a     resample attempt, a similar issue to CVE-2017-7585. (CVE-2017-7742)

  - The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of     service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted     audio file. (CVE-2017-8361)

  - The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of     service (invalid read and application crash) via a crafted audio file. (CVE-2017-8362)

  - The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of     service (heap-based buffer over-read and application crash) via a crafted audio file. (CVE-2017-8363)

  - The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of     service (buffer over-read and application crash) via a crafted audio file. (CVE-2017-8365)

  - An issue was discovered in libsndfile 1.0.28. There is a NULL pointer dereference in the function     sf_write_int in sndfile.c, which will lead to a denial of service. (CVE-2018-19432)

  - An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulaw_array in     ulaw.c that will lead to a denial of service. (CVE-2018-19661)

  - There is a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a     denial of service. (CVE-2018-19758)

  - It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond     the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this flaw to make     the application crash. (CVE-2019-3832)

  - An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to     submit a specially crafted file (via tricking a user to open or otherwise) to an application linked with     libsndfile and using the FLAC codec, could trigger an out-of-bounds read that would most likely cause a     crash but could potentially leak memory information that could be used in further exploitation of other     flaws. (CVE-2021-4156)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

According to the versions of the libsndfile packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The function d2ulaw_array() in ulaw.c of libsndfile     1.0.29pre1 may lead to a remote DoS attack (SEGV on     unknown address 0x000000000000), a different     vulnerability than CVE-2017-14246.(CVE-2017-17457)

  - The function d2alaw_array() in alaw.c of libsndfile     1.0.29pre1 may lead to a remote DoS attack (SEGV on     unknown address 0x000000000000), a different     vulnerability than CVE-2017-14245.(CVE-2017-17456)

  - In libsndfile 1.0.28, a divide-by-zero error exists in     the function double64_init() in double64.c, which may     lead to DoS when playing a crafted audio     file.(CVE-2017-14634)

  - There is a heap-based buffer over-read at wav.c in     wav_write_header in libsndfile 1.0.28 that will cause a     denial of service.(CVE-2018-19758)

  - An issue was discovered in libsndfile 1.0.28. There is     a buffer over-read in the function i2ulaw_array in     ulaw.c that will lead to a denial of     service.(CVE-2018-19661)

  - An issue was discovered in libsndfile 1.0.28. There is     a NULL pointer dereference in the function sf_write_int     in sndfile.c, which will lead to a denial of     service.(CVE-2018-19432)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in libsndfile 1.0.28. There is     a NULL pointer dereference in the function sf_write_int     in sndfile.c, which will lead to a denial of     service.(CVE-2018-19432)

  - There is a heap-based buffer over-read at wav.c in     wav_write_header in libsndfile 1.0.28 that will cause a     denial of service.(CVE-2018-19758)

  - An issue was discovered in libsndfile 1.0.28. There is     a buffer over-read in the function i2ulaw_array in     ulaw.c that will lead to a denial of     service.(CVE-2018-19661)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libsndfile: heap-based buffer over-read at wav.c in wav_write_header (CVE-2018-19758)

  - An issue was discovered in libsndfile 1.0.28. There is a NULL pointer dereference in the function     sf_write_int in sndfile.c, which will lead to a denial of service. (CVE-2018-19432)

  - An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulaw_array in     ulaw.c that will lead to a denial of service. (CVE-2018-19661)

  - It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond     the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this flaw to make     the application crash. (CVE-2019-3832)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	Name	Product	Family	Published	Updated	Severity
132820	EulerOS Virtualization for ARM 64 3.0.5.0 : libsndfile (EulerOS-SA-2020-1066)	Nessus	Huawei Local Security Checks	1/13/2020	4/1/2024	medium
145464	Ubuntu 16.04 LTS : libsndfile vulnerabilities (USN-4704-1)	Nessus	Ubuntu Local Security Checks	1/27/2021	10/20/2023	critical
119878	Debian DLA-1618-1 : libsndfile security update	Nessus	Debian Local Security Checks	12/27/2018	1/11/2021	high
136269	EulerOS Virtualization for ARM 64 3.0.2.0 : libsndfile (EulerOS-SA-2020-1566)	Nessus	Huawei Local Security Checks	5/1/2020	3/13/2024	medium
125812	Ubuntu 16.04 LTS / 18.04 LTS : libsndfile vulnerabilities (USN-4013-1)	Nessus	Ubuntu Local Security Checks	6/11/2019	10/21/2023	high
196321	RHEL 6 : libsndfile (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	critical
142107	Debian DLA-2418-1 : libsndfile security update	Nessus	Debian Local Security Checks	10/30/2020	2/13/2024	high
137943	EulerOS Virtualization 3.0.6.0 : libsndfile (EulerOS-SA-2020-1724)	Nessus	Huawei Local Security Checks	7/1/2020	3/5/2024	medium
196344	RHEL 7 : libsndfile (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	critical
132609	EulerOS 2.0 SP8 : libsndfile (EulerOS-SA-2020-1016)	Nessus	Huawei Local Security Checks	1/2/2020	4/1/2024	medium
137026	EulerOS 2.0 SP5 : libsndfile (EulerOS-SA-2020-1608)	Nessus	Huawei Local Security Checks	6/2/2020	3/8/2024	medium
196304	RHEL 8 : libsndfile (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	medium

Detections

Analytics

Plugins Search

medium

critical

high

medium

high

critical

high

medium

critical

medium

medium

medium