Stack-based buffer overflow in libsndfile - CVE-2018-13139

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU14198

Stack-based buffer overflow in libsndfile - CVE-2018-13139

Published: August 6, 2018


Vulnerability identifier: #VU14198
CSH Severity: Low
CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-13139
CWE-ID: CWE-121
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote unauthenticated attacker to cause DoS condition on the target system.

The weakness exists due to stack-based buffer overflow in psf_memset in common.c. A remote attacker can send a specially crafted audio file, trick the victim into opening it, trigger memory corruption and cause the service to crash.

Affected software

libsndfile
Gentoo Linux
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Manager Proxy
SUSE CaaS Platform
SUSE Enterprise Storage
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for x86_64
Red Hat CodeReady Linux Builder for ARM 64
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
SUSE OpenStack Cloud
SUSE Linux Enterprise Server
Ubuntu
SUSE Linux Enterprise Server for SAP
Opensuse
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
libsndfile (Ubuntu package)
libsndfile (Alpine package)
SUSE Linux Enterprise Module for Packagehub Subpackages
sndfile-programs (Ubuntu package)
libsndfile1 (Ubuntu package)
libsndfile (Red Hat package)
libsndfile-debugsource
libsndfile1-32bit-debuginfo
libsndfile1-32bit
libsndfile1-debuginfo
libsndfile1
libsndfile-devel

How to mitigate CVE-2018-13139

Install update from vendor's website.

libsndfile (Ubuntu package) - addressed in versions 1.0.25-10ubuntu0.16.04.2, 1.0.28-4ubuntu0.18.04.1, 1.0.28-4ubuntu0.18.10.1
libsndfile (Alpine package) - addressed in versions 1.0.28-r3, 1.0.28-r4
sndfile-programs (Ubuntu package) - addressed in versions 1.0.25-10ubuntu0.16.04.3, 1.0.2510ubuntu0.16.04.3+esm2
libsndfile1 (Ubuntu package) - addressed in versions 1.0.25-10ubuntu0.16.04.3, 1.0.2510ubuntu0.16.04.3+esm2
libsndfile (Red Hat package) - addressed in versions 1.0.25-11.el7, 1.0.28-10.el8
libsndfile-debugsource - update to 1.0.28-5.12.1
libsndfile1-32bit-debuginfo - update to 1.0.28-5.12.1
libsndfile1-32bit - update to 1.0.28-5.12.1
libsndfile1-debuginfo - update to 1.0.28-5.12.1
libsndfile1 - update to 1.0.28-5.12.1
libsndfile-devel - update to 1.0.28-5.12.1

External References

Related Security Bulletins