CVE-2017-6838

Published: Mar 20, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

Integer overflow in sfcommands/sfconvert.c in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

DSA-3814

vendor-advisory

x_refsource_DEBIAN

[oss-security] 20170313 Re: audiofile: multiple ubsan crashes

mailing-list

x_refsource_MLIST

https://github.com/mpruett/audiofile/issues/41

x_refsource_MISC

https://github.com/antlarr/audiofile/commit/7d65f89defb092b63bcbc5d98349fb222ca73b3c

x_refsource_MISC

https://blogs.gentoo.org/ago/2017/02/20/audiofile-multiple-ubsan-crashes/

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2017-6838

Description

Affected Products

References