CVE-2014-9496
Fixed in a distro release EPSS <1%
The sd2_parse_rsrc_fork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a (1) map offset or (2) rsrc marker, which triggers an out-of-bounds read.
Products: libsndfile_project libsndfile, opensuse, debian_linux, canonical ubuntu_linux, oracle solaris
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libsndfile | 1.0.25-9.1 |
| Debian 13 | libsndfile | 1.0.25-9.1 |
| Debian 14 | libsndfile | 1.0.25-9.1 |
| Debian 6.0 | libsndfile | 1.0.21-3+squeeze2 |
| Debian 7 | libsndfile | 1.0.25-9.1+deb7u1 |
| Ubuntu 14.04 LTS | libsndfile | 1.0.25-7ubuntu2.1 |
| openSUSE Tumbleweed | libsndfile | 1.0.26-2.4 |
| openSUSE Tumbleweed | libsndfile-progs | 1.0.26-2.4 |