An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values.
References
Link | Resource |
---|---|
https://github.com/erikd/libsndfile/issues/317 | Issue Tracking Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html | Mailing List Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2020/10/msg00030.html | |
https://security.gentoo.org/glsa/202007-65 | |
https://usn.ubuntu.com/4013-1/ |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2017-09-21T13:00:00
Updated: 2020-10-29T18:06:14
Reserved: 2017-09-10T00:00:00
Link: CVE-2017-14245
JSON object: View
NVD Information
Status : Modified
Published: 2017-09-21T13:29:00.203
Modified: 2020-10-29T19:15:12.710
Link: CVE-2017-14245
JSON object: View
Redhat Information
No data.
CWE