CVE-2014-9496: Low severity Libsndfile Project Libsndfile vulnerability
The sd2parsersrcfork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a (1) map offset or (2) rsrc marker, which triggers an out-of-bounds read.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the impact of CVE-2014-9496?
CVE-2014-9496 allows attackers to trigger an out-of-bounds read which can lead to various unspecified impacts.
Which software versions are affected by CVE-2014-9496?
CVE-2014-9496 affects libsndfile versions prior to 1.0.26 and several Linux distributions including specific versions of openSUSE, Debian, and Ubuntu.
How can I mitigate CVE-2014-9496?
To mitigate CVE-2014-9496, it is recommended to upgrade libsndfile to version 1.0.26 or later to eliminate the vulnerability.
Is CVE-2014-9496 a critical vulnerability?
The severity of CVE-2014-9496 is not defined, but out-of-bounds reads can lead to potential security risks.
What types of attacks can exploit CVE-2014-9496?
CVE-2014-9496 can be exploited through crafted input that manipulates the map offset or rsrc marker.