CVE-2011-2696: Buffer Overflow
First published: Thu Jul 14 2011(Updated: )
An integer overflow, leading to heap-based buffer overflow flaw was found in the way libsndfile, library for reading and writing of sound files, processed certain PARIS Audio Format (PAF) audio files with crafted count of channels in the PAF file header. A remote attacker could provided a specially-crafted PAF audio file, which once opened by a local, unsuspecting user in an application, linked against libsndfile could lead to that particular application crash (denial of service), or, potentially arbitrary code execution with the privileges of the user running the application. References: [1] <a href="https://bugs.gentoo.org/show_bug.cgi?id=375125">https://bugs.gentoo.org/show_bug.cgi?id=375125</a> [2] <a href="http://www.securelist.com/en/advisories/45125">http://www.securelist.com/en/advisories/45125</a> [3] <a href="http://secunia.com/advisories/45125/">http://secunia.com/advisories/45125/</a> [4] <a href="http://www.mega-nerd.com/libsndfile/">http://www.mega-nerd.com/libsndfile/</a> Relevant upstream patch (from Bzr log, local copy will be attached later too): revno: 1610 committer: Erik de Castro Lopo <erikd> branch nick: libsndfile-dev timestamp: Wed 2011-07-06 19:40:05 +1000 message: Fix for Secunia Advisory SA45125, heap overflow in PAF file handler.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mega-nerd Libsndfile | =1.0.18 | |
| Mega-nerd Libsndfile | =1.0.0-rc1 | |
| Mega-nerd Libsndfile | =1.0.3 | |
| Mega-nerd Libsndfile | =1.0.13 | |
| Mega-nerd Libsndfile | =1.0.0-rc6 | |
| Mega-nerd Libsndfile | =1.0.19 | |
| Mega-nerd Libsndfile | =1.0.15 | |
| Mega-nerd Libsndfile | =1.0.6 | |
| Mega-nerd Libsndfile | =0.0.8 | |
| Mega-nerd Libsndfile | =1.0.10 | |
| Mega-nerd Libsndfile | =0.0.28 | |
| Mega-nerd Libsndfile | =1.0.21 | |
| Mega-nerd Libsndfile | =1.0.7 | |
| Mega-nerd Libsndfile | =1.0.9 | |
| Mega-nerd Libsndfile | =1.0.22 | |
| Mega-nerd Libsndfile | =1.0.17 | |
| Mega-nerd Libsndfile | =1.0.20 | |
| Mega-nerd Libsndfile | <=1.0.24 | |
| Mega-nerd Libsndfile | =1.0.5 | |
| Mega-nerd Libsndfile | =1.0.4 | |
| Mega-nerd Libsndfile | =1.0.14 | |
| Mega-nerd Libsndfile | =1.0.0 | |
| Mega-nerd Libsndfile | =1.0.12 | |
| Mega-nerd Libsndfile | =1.0.11 | |
| Mega-nerd Libsndfile | =1.0.23 | |
| Mega-nerd Libsndfile | =1.0.1 | |
| Mega-nerd Libsndfile | =1.0.8 | |
| Mega-nerd Libsndfile | =1.0.16 | |
| Mega-nerd Libsndfile | =1.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.openwall.com/lists/oss-security/2011/07/14/3
- http://www.openwall.com/lists/oss-security/2011/07/14/2
- http://secunia.com/advisories/45125
- http://secunia.com/advisories/45351
- http://www.mega-nerd.com/libsndfile/ChangeLog
- https://bugs.gentoo.org/show_bug.cgi?id=375125
- http://www.openwall.com/lists/oss-security/2011/07/15/1
- http://www.openwall.com/lists/oss-security/2011/07/18/1
- https://bugzilla.redhat.com/show_bug.cgi?id=721234
- http://www.openwall.com/lists/oss-security/2011/07/15/4
- http://www.redhat.com/support/errata/RHSA-2011-1084.html
- http://www.securityfocus.com/bid/48644
- http://www.openwall.com/lists/oss-security/2011/07/15/3
- http://www.openwall.com/lists/oss-security/2011/07/14/4
- http://www.openwall.com/lists/oss-security/2011/07/14/1
- http://www.securelist.com/en/advisories/45125
- http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062955.html
- http://secunia.com/advisories/45433
- http://www.debian.org/security/2011/dsa-2288
- http://secunia.com/advisories/45384
- http://secunia.com/advisories/45388
- http://www.ubuntu.com/usn/USN-1174-1
- https://hermes.opensuse.org/messages/10387521
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:119
- http://secunia.com/advisories/45125/
- http://www.mega-nerd.com/libsndfile/
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=512812
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=512812&action=edit
- http://www.mega-nerd.com/Bzr/libsndfile-dev/
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=721239
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=721240
- http://www.mega-nerd.com/
- https://access.redhat.com/security/cve/CVE-2011-2696
- https://rhn.redhat.com/errata/RHSA-2011-1084.html
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/description
- agent/type
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2011-2696
- vendor/mega-nerd
- canonical/mega-nerd libsndfile
- version/mega-nerd libsndfile/1.0.18
- version/mega-nerd libsndfile/1.0.0-rc1
- version/mega-nerd libsndfile/1.0.3
- version/mega-nerd libsndfile/1.0.13
- version/mega-nerd libsndfile/1.0.0-rc6
- version/mega-nerd libsndfile/1.0.19
- version/mega-nerd libsndfile/1.0.15
- version/mega-nerd libsndfile/1.0.6
- version/mega-nerd libsndfile/0.0.8
- version/mega-nerd libsndfile/1.0.10
- version/mega-nerd libsndfile/0.0.28
- version/mega-nerd libsndfile/1.0.21
- version/mega-nerd libsndfile/1.0.7
- version/mega-nerd libsndfile/1.0.9
- version/mega-nerd libsndfile/1.0.22
- version/mega-nerd libsndfile/1.0.17
- version/mega-nerd libsndfile/1.0.20
- version/mega-nerd libsndfile/1.0.24
- version/mega-nerd libsndfile/1.0.5
- version/mega-nerd libsndfile/1.0.4
- version/mega-nerd libsndfile/1.0.14
- version/mega-nerd libsndfile/1.0.0
- version/mega-nerd libsndfile/1.0.12
- version/mega-nerd libsndfile/1.0.11
- version/mega-nerd libsndfile/1.0.23
- version/mega-nerd libsndfile/1.0.1
- version/mega-nerd libsndfile/1.0.8
- version/mega-nerd libsndfile/1.0.16
- version/mega-nerd libsndfile/1.0.2