CVE-2018-19432

An issue was discovered in libsndfile 1.0.28. There is a NULL pointer dereference in the function sfwriteint in sndfile.c, which will lead to a denial of service.

References

Affected packages

Debian:11 / libsndfile

Package

Name: libsndfile
Purl: pkg:deb/debian/libsndfile?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.28-5

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:12 / libsndfile

Package

Name: libsndfile
Purl: pkg:deb/debian/libsndfile?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.28-5

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:13 / libsndfile

Package

Name: libsndfile
Purl: pkg:deb/debian/libsndfile?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.28-5

Ecosystem specific

{
    "urgency": "unimportant"
}

Git / github.com/libsndfile/libsndfile

Affected ranges

Type: GIT
Repo: https://github.com/libsndfile/libsndfile
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

1d928bffdb65e827c3e7d17ece0e123b4a70ec6c

Affected versions

1.*

1.0.25

1.0.26

1.0.27

1.0.28