CVE-2015-7805
NoneCVSS
—
EPSS
14.3%
Published
Nov 17, 2015
CISA due date
—
The record
Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex value in the header in an AIFF file.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | libsndfile | 0 | 1.0.25-10 |
| Debian:12 | libsndfile | 0 | 1.0.25-10 |
| Debian:13 | libsndfile | 0 | 1.0.25-10 |
| Debian:6.0 | libsndfile | 0 | 1.0.21-3+squeeze2 |
| Debian:7 | libsndfile | 0 | 1.0.25-9.1+deb7u1 |
| Mageia:5 | libsndfile | 0 | 1.0.25-9.1.mga5 |
| SUSE:Linux Enterprise Desktop 11 SP3 | libsndfile | 0 | 1.0.20-2.10.2 |
| SUSE:Linux Enterprise Desktop 11 SP4 | libsndfile | 0 | 1.0.20-2.10.2 |
| SUSE:Linux Enterprise Desktop 12 | libsndfile | 0 | 1.0.25-25.1 |
| SUSE:Linux Enterprise Desktop 12 SP1 | libsndfile | 0 | 1.0.25-25.1 |
| SUSE:Linux Enterprise Server 11 SP3 | libsndfile | 0 | 1.0.20-2.10.2 |
| SUSE:Linux Enterprise Server 11 SP3-TERADATA | libsndfile | 0 | 1.0.20-2.10.2 |
| SUSE:Linux Enterprise Server 11 SP4 | libsndfile | 0 | 1.0.20-2.10.2 |
| SUSE:Linux Enterprise Server 12 | libsndfile | 0 | 1.0.25-25.1 |
| SUSE:Linux Enterprise Server 12 SP1 | libsndfile | 0 | 1.0.25-25.1 |
| SUSE:Linux Enterprise Server for SAP Applications 11 SP3 | libsndfile | 0 | 1.0.20-2.10.2 |
| SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | libsndfile | 0 | 1.0.20-2.10.2 |
| SUSE:Linux Enterprise Server for SAP Applications 12 | libsndfile | 0 | 1.0.25-25.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | libsndfile | 0 | 1.0.25-25.1 |
| SUSE:Linux Enterprise Software Development Kit 11 SP3 | libsndfile | 0 | 1.0.20-2.10.2 |
| SUSE:Linux Enterprise Software Development Kit 11 SP4 | libsndfile | 0 | 1.0.20-2.10.2 |
| SUSE:Linux Enterprise Software Development Kit 12 | libsndfile | 0 | 1.0.25-25.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP1 | libsndfile | 0 | 1.0.25-25.1 |
| Ubuntu:14.04:LTS | libsndfile | 0 | 1.0.25-7ubuntu2.1 |
| openSUSE:Tumbleweed | libsndfile | 0 | 1.0.26-2.4 |
| openSUSE:Tumbleweed | libsndfile-progs | 0 | 1.0.26-2.4 |
Related vulnerabilities
- CVE-2024-50612 libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read. Also affects libsndfile
- CVE-2024-50613 libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in… Also affects libsndfile
- CVE-2022-33065 Multiple signed integers overflow in function au_read_header in src/au.c and in functions… Also affects libsndfile
- CVE-2021-4156 An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. Also affects libsndfile
- CVE-2017-14245 An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may… Also affects libsndfile
- CVE-2017-12562 Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile… Also affects libsndfile
- CVE-2017-7585 In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can… Also affects libsndfile
- CVE-2014-9496 The sd2_parse_rsrc_fork function in sd2.c in libsndfile allows attackers to have… Also affects libsndfile