CVE-2019-3832: Medium severity Libsndfile Project Libsndfile vulnerability
It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of a buffer in wavwriteheader() function in wav.c. A local attacker may use this flaw to make the application crash.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-3832?
CVE-2019-3832 is considered a moderate severity vulnerability due to its potential to crash applications.
How do I fix CVE-2019-3832?
You can fix CVE-2019-3832 by updating to the patched versions of libsndfile, specifically 1.0.31-2, 1.2.0-1, or 1.2.2-1.
What applications are affected by CVE-2019-3832?
CVE-2019-3832 affects libsndfile versions up to 1.0.28, as well as various Linux distributions including Debian 9.0, Ubuntu 16.04, 18.04, and 18.10.
Who can exploit CVE-2019-3832?
CVE-2019-3832 can be exploited by local attackers who may use it to cause application crashes.
What function in the code is vulnerable in CVE-2019-3832?
The vulnerable function in CVE-2019-3832 is wav_write_header() located in wav.c.