CVE-2017-7585

In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file.

In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file.

In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file.

A stack-based buffer overflow via a specially crafted FLAC file due to an error in the header_read() function (CVE-2017-7586).

Several stack-based buffer overflows via a specially crafted FLAC file due to an error in the flac_buffer_copy() function (CVE-2017-7585, CVE-2017-7741, CVE-2017-7742).

Global buffer overflow in flac_buffer_copy() (CVE-2017-8361).

Invalid memory read in flac_buffer_copy() (CVE-2017-8362).

Heap-based buffer overflow in flac_buffer_copy() (CVE-2017-8363).

The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file (CVE-2017-8365).

These are all security issues fixed in the libsndfile-devel-1.0.31-2.2 package on the GA media of openSUSE Tumbleweed.

This update for libsndfile fixes the following issues:

• CVE-2017-7585,CVE-2017-7741,CVE-2017-7742: Some stack-based buffer overflows via a specially crafted FLAC file were fixed (error in the 'flac_buffer_copy()' function) (bsc#1033054, bsc#1033914, bsc#1033915).

This update for libsndfile fixes the following security issues:

• CVE-2017-7586: A stack-based buffer overflow via a specially crafted FLAC file was fixed (error in the 'header_read()' function) (bsc#1033053)
• CVE-2017-7585,CVE-2017-7741, CVE-2017-7742: Several stack-based buffer overflows via a specially crafted FLAC file (error in the 'flac_buffer_copy()' function) were fixed (bsc#1033054,bsc#1033915,bsc#1033914).

This update for libsndfile fixes the following issues:

• CVE-2017-8362: invalid memory read in flac_buffer_copy (flac.c) (bsc#1036943)
• CVE-2017-8365: global buffer overflow in i2les_array (pcm.c) (bsc#1036946)
• CVE-2017-8361: global buffer overflow in flac_buffer_copy (flac.c) (bsc#1036944)
• CVE-2017-8363: heap-based buffer overflow in flac_buffer_copy (flac.c) (bsc#1036945)
• CVE-2017-7585: stack-based buffer overflow via a specially crafted FLAC file (bsc#1033054)

This update for libsndfile fixes the following issues:

• CVE-2017-8361: Global buffer overflow in flac_buffer_copy. (bsc#1036946)
• CVE-2017-8362: Invalid memory read in flac_buffer_copy. (bsc#1036943)
• CVE-2017-8363: Heap-based buffer overflow in flac_buffer_copy. (bsc#1036945)
• CVE-2017-7585, CVE-2017-7741, CVE-2017-7742: Stack-based buffer overflows via specially crafted FLAC files. (bsc#1033054)

Agostino Sarubbo and Jakub Jirasek discovered that libsndfile incorrectly handled certain malformed files. A remote attacker could use this issue to cause libsndfile to crash, resulting in a denial of service, or possibly execute arbitrary code.