{"id":"CVE-2017-17457","aliases":["ALPINE-CVE-2017-17457","BELL-CVE-2017-17457","EUVD-2017-8621","MGASA-2018-0336","SUSE-SU-2018:2065-1","SUSE-SU-2018:2074-1","SUSE-SU-2019:14008-1","UBUNTU-CVE-2017-17457","USN-4013-1","openSUSE-SU-2024:10992-1"],"status":"rejected","title":"CVE-2017-17457 does not affect BellSoft software","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14246. Reason: This candidate is a duplicate of CVE-2017-14246. Notes: All CVE users should reference CVE-2017-14246 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2017-12-07T00:00:00Z","modified":"2026-06-15T18:18:06Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"libsndfile","fixed_in":["1.0.28-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"libsndfile","fixed_in":["1.0.28-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"libsndfile","fixed_in":["1.0.28-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"libsndfile","fixed_in":["1.0.28-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"libsndfile","fixed_in":["1.0.28-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"libsndfile","fixed_in":["1.0.28-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"libsndfile","fixed_in":["1.0.28-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"libsndfile","fixed_in":["1.0.28-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"libsndfile","fixed_in":["1.0.28-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libsndfile","fixed_in":["1.0.28-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libsndfile","fixed_in":["1.0.28-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libsndfile","fixed_in":["1.0.28-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libsndfile","fixed_in":["1.0.28-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libsndfile","fixed_in":["1.0.28-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libsndfile","fixed_in":["1.0.28-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"libsndfile","fixed_in":["1.0.28-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"libsndfile","fixed_in":["1.0.28-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"libsndfile","fixed_in":["1.0.28-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"libsndfile","fixed_in":["1.0.28-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"libsndfile","fixed_in":["1.0.28-r6"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"libsndfile","fixed_in":["1.0.25-10ubuntu0.16.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libsndfile","fixed_in":["1.0.28-4ubuntu0.18.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-r6"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-3.3.mga6"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-36.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-36.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-36.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-36.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-5.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.20-2.19.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.20-2.19.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.20-2.19.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-10ubuntu0.16.04.2"}]}],"versions":["1.0.25-9.1","1.0.25-10","1.0.25-10ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-4ubuntu0.18.04.1"}]}],"versions":["1.0.28-4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-10ubuntu0.16.04.2"}]}],"versions":["1.0.25-9.1","1.0.25-10","1.0.25-10ubuntu0.16.04.1"],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-4ubuntu0.18.04.1"}]}],"versions":["1.0.28-4"],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-2.2"}]}],"bundled":15}],"references":[{"url":"https://security.alpinelinux.org/vuln/CVE-2017-17457","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2017-17457","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0336.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23382","tags":["report"]},{"url":"http://lists.suse.com/pipermail/sle-security-updates/2018-July/004311.html","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182065-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1071767","tags":["report"]},{"url":"https://bugzilla.suse.com/1071777","tags":["report"]},{"url":"https://bugzilla.suse.com/1100167","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-13139","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182074-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201914008-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1117954","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19758","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-17457","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4013-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-17457","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-6892","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14245","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14246","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14634","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-16942","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17456","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-13139","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19432","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19661","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19662","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19758","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-3832","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3246","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-17457","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14246. Reason: This candidate is a duplicate of CVE-2017-14246. Notes: All CVE users should reference CVE-2017-14246 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"rejected","published":"2017-12-07T08:00:00Z","modified":"2019-06-28T16:36:56Z","updated_at":"2026-11-02T14:33:18.248329Z"}],"euvd":[{"id":"EUVD-2017-8621","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14246. Reason: This candidate is a duplicate of CVE-2017-14246. Notes: All CVE users should reference CVE-2017-14246 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"published","published":"2017-12-07T08:00:00Z","modified":"2019-06-28T16:36:56Z","updated_at":"2026-11-03T03:51:29.418182Z"}],"nvd":[{"id":"CVE-2017-17457","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14246. Reason: This candidate is a duplicate of CVE-2017-14246. Notes: All CVE users should reference CVE-2017-14246 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"rejected","published":"2017-12-07T08:29:00.333Z","modified":"2023-11-07T02:41:43.127Z","updated_at":"2026-11-02T14:04:10.156892Z"}],"osv":[{"id":"ALPINE-CVE-2017-17457","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14246. Reason: This candidate is a duplicate of CVE-2017-14246. Notes: All CVE users should reference CVE-2017-14246 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"published","published":"2017-12-07T08:29:00.333Z","modified":"2026-06-15T18:18:06.784003603Z","updated_at":"2026-11-02T15:27:46.716249Z"},{"id":"BELL-CVE-2017-17457","title":"CVE-2017-17457 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:12.11932Z","modified":"2026-01-26T09:47:49.967181Z","updated_at":"2026-11-02T15:28:14.137943Z"},{"id":"CVE-2017-17457","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14246. Reason: This candidate is a duplicate of CVE-2017-14246. Notes: All CVE users should reference CVE-2017-14246 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"published","published":"2017-12-07T08:29:00Z","modified":"2026-04-16T06:22:01.521522152Z","updated_at":"2026-11-02T15:44:04.853379Z"},{"id":"MGASA-2018-0336","title":"Updated libsndfile packages fix security vulnerabilities","description":"Updated libsndfile package fixes security vulnerabilities:\n\nThe function d2alaw_array() in alaw.c of libsndfile 1.0.29pre1 may lead\nto a remote DoS attack (CVE-2017-17456).\n\nThe function d2ulaw_array() in ulaw.c of libsndfile 1.0.29pre1 may lead\nto a remote DoS attack (CVE-2017-17457).\n\nA stack-based buffer overflow in psf_memset in common.c in libsndfile\n1.0.28 allows remote attackers to cause a denial of service (application\ncrash) or possibly have unspecified other impact via a crafted audio file\n(CVE-2018-13139).\n","status":"published","published":"2018-08-12T20:39:12Z","modified":"2026-04-16T06:26:17.028582778Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2024:10992-1","title":"libsndfile-devel-1.0.31-2.2 on GA media","description":"These are all security issues fixed in the libsndfile-devel-1.0.31-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:24.600075Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2018:2065-1","title":"Security update for libsndfile","description":"This update for libsndfile fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-13139: Fix a stack-based buffer overflow in psf_memset in common.c that allows remote attackers to cause a denial of service (bsc#1100167).\n- CVE-2017-17456: Prevent segmentation fault in the function d2alaw_array() that may have lead to a remote DoS (bsc#1071777)\n- CVE-2017-17457: Prevent segmentation fault in the function d2ulaw_array() that may have lead to a remote DoS, a different vulnerability than CVE-2017-14246 (bsc#1071767)\n","status":"published","published":"2018-07-26T14:44:08Z","modified":"2026-02-04T02:24:24.995655Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:2074-1","title":"Security update for libsndfile","description":"This update for libsndfile fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-13139: Fix a stack-based buffer overflow in psf_memset in common.c that allows remote attackers to cause a denial of service (bsc#1100167).\n- CVE-2017-17456: Prevent segmentation fault in the function d2alaw_array() that may have lead to a remote DoS (bsc#1071777)\n- CVE-2017-17457: Prevent segmentation fault in the function d2ulaw_array() that may have lead to a remote DoS, a different vulnerability than CVE-2017-14246 (bsc#1071767)\n","status":"published","published":"2018-07-26T14:41:45Z","modified":"2026-02-04T02:31:43.801159Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2019:14008-1","title":"Security update for libsndfile","description":"This update for libsndfile fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2017-17456: Prevent segmentation fault in the function d2alaw_array() that may have lead to a remote DoS (bsc#1071777).\n- CVE-2017-17457: Prevent segmentation fault in the function d2ulaw_array() that may have lead to a remote DoS, a different vulnerability than CVE-2017-14246 (bsc#1071767).\n- CVE-2018-19758: Fixed a heap-based buffer over-read at wav.c in wav_write_header that could have been used for a denial of service attack (bsc#1117954).\n","status":"published","published":"2019-04-02T11:14:31Z","modified":"2025-05-02T04:06:36.033531Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"UBUNTU-CVE-2017-17457","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14246. Reason: This candidate is a duplicate of CVE-2017-14246. Notes: All CVE users should reference CVE-2017-14246 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"published","published":"2017-12-07T00:00:00Z","modified":"2026-04-22T11:20:04.662206Z","updated_at":"2026-11-02T15:54:14.563448Z"},{"id":"USN-4013-1","title":"libsndfile vulnerabilities","description":"It was discovered that libsndfile incorrectly handled certain malformed\nfiles. A remote attacker could use this issue to cause libsndfile to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n","status":"published","published":"2019-06-10T14:08:57Z","modified":"2026-04-22T09:56:51.612373Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}