SB2017092812 - Denial of service in libsndfile

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Heap-based buffer overflow (CVE-ID: CVE-2017-12562)

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists in the psf_binheader_writef function due to heap-based buffer overflow. A remote attacker can trick the victim into opening a specially crafted input, trigger a heap-based buffer overflow condition and cause the service to crash.

2) Divide by zero (CVE-ID: CVE-2017-14634)

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists in the double64_init() function due to a divide-by-zero error when processing crafted audio files. A remote attacker can trick the victim into opening a specially crafted audio file, trigger a divide-by-zero condition and cause the service to crash.

Remediation

Install update from vendor's website.

References

• https://github.com/manxorist/libsndfile/commit/b6a9d7e95888ffa77d8c75ce3f03e6c7165587cd
• https://github.com/fabiangreffrath/libsndfile/commit/904c5153f51f968d2f1deb0ad73eb8f23180327d