MGASA-2019-0300

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2019-0300.html

Import Source

https://advisories.mageia.org/MGASA-2019-0300.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2019-0300

Related

CVE-2019-3832

Published

2019-10-23T21:06:40Z

Modified

2019-10-23T19:42:12Z

Summary

Updated libsndfile packages fix security vulnerability

Details

Updated libsndfile package fixes security vulnerability:

It was discovered that libsndfile incorrectly handled certain malformed files. A remote attacker could use this issue to cause libsndfile to crash, resulting in a denial of service, or possibly execute arbitrary code (CVE-2019-3832).

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:7 / libsndfile

Package

Name: libsndfile
Purl: pkg:rpm/mageia/libsndfile?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.28-8.1.mga7

Ecosystem specific

{
    "section": "core"
}