Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-19758

Fixed in a distro release EPSS 2%

There is a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a denial of service.

Published 2018-11-30 · CVE record · OSV

Products: libsndfile_project libsndfile, debian_linux

Distro releases

ReleasePackageFixed in
Alpine 3.10libsndfile1.0.28-r8
Alpine 3.11libsndfile1.0.28-r8
Alpine 3.12libsndfile1.0.28-r8
Alpine 3.13libsndfile1.0.28-r8
Alpine 3.14libsndfile1.0.28-r8
Alpine 3.15libsndfile1.0.28-r8
Alpine 3.16libsndfile1.0.28-r8
Alpine 3.17libsndfile1.0.28-r8
Alpine 3.18libsndfile1.0.28-r8
Alpine 3.19libsndfile1.0.28-r8
Alpine 3.20libsndfile1.0.28-r8
Alpine 3.21libsndfile1.0.28-r8
Alpine 3.22libsndfile1.0.28-r8
Alpine 3.23libsndfile1.0.28-r8
Alpine 3.24libsndfile1.0.28-r8
Alpine 3.7libsndfile1.0.28-r5
Alpine 3.8libsndfile1.0.28-r6
Alpine 3.9libsndfile1.0.28-r8
Arch Linuxlib32-libsndfile1.0.31-1
Arch Linuxlibsndfile1.0.31-1
Debian 12libsndfile1.0.28-5
Debian 13libsndfile1.0.28-5
Debian 14libsndfile1.0.28-5
Debian 8libsndfile1.0.25-9.1+deb8u3
Debian 9libsndfile1.0.27-3+deb9u1
SUSE Enterprise Storage 6libsndfile1.0.28-5.12.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOSlibsndfile1.0.28-5.12.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSlibsndfile1.0.28-5.12.1
SUSE Linux Enterprise High Performance Computing 15-ESPOSlibsndfile1.0.28-5.12.1
SUSE Linux Enterprise High Performance Computing 15-LTSSlibsndfile1.0.28-5.12.1
SUSE Linux Enterprise Module for Basesystem 15 SP2libsndfile1.0.28-5.12.1
SUSE Linux Enterprise Module for Basesystem 15 SP3libsndfile1.0.28-5.12.1
SUSE Linux Enterprise Module for Package Hub 15 SP2libsndfile1.0.28-5.12.1
SUSE Linux Enterprise Module for Package Hub 15 SP3libsndfile1.0.28-5.12.1
SUSE Linux Enterprise Server 11 SP4libsndfile1.0.20-2.19.12.1
SUSE Linux Enterprise Server 12 SP2-BCLlibsndfile1.0.25-36.23.1
SUSE Linux Enterprise Server 12 SP3-BCLlibsndfile1.0.25-36.23.1
SUSE Linux Enterprise Server 12 SP3-LTSSlibsndfile1.0.25-36.23.1
SUSE Linux Enterprise Server 12 SP4-LTSSlibsndfile1.0.25-36.23.1
SUSE Linux Enterprise Server 12 SP5libsndfile1.0.25-36.23.1
SUSE Linux Enterprise Server 15 SP1-BCLlibsndfile1.0.28-5.12.1
SUSE Linux Enterprise Server 15 SP1-LTSSlibsndfile1.0.28-5.12.1
SUSE Linux Enterprise Server 15-LTSSlibsndfile1.0.28-5.12.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4libsndfile1.0.20-2.19.12.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3libsndfile1.0.25-36.23.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4libsndfile1.0.25-36.23.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5libsndfile1.0.25-36.23.1
SUSE Linux Enterprise Server for SAP Applications 15libsndfile1.0.28-5.12.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1libsndfile1.0.28-5.12.1
SUSE Linux Enterprise Software Development Kit 11 SP4libsndfile1.0.20-2.19.12.1
SUSE Linux Enterprise Software Development Kit 12 SP5libsndfile1.0.25-36.23.1
SUSE Manager Proxy 4.0libsndfile1.0.28-5.12.1
SUSE Manager Retail Branch Server 4.0libsndfile1.0.28-5.12.1
SUSE Manager Server 4.0libsndfile1.0.28-5.12.1
SUSE OpenStack Cloud 8libsndfile1.0.25-36.23.1
SUSE OpenStack Cloud 9libsndfile1.0.25-36.23.1
SUSE OpenStack Cloud Crowbar 9libsndfile1.0.25-36.23.1
Ubuntu 16.04 LTSlibsndfile1.0.25-10ubuntu0.16.04.2
Ubuntu 16.04 LTSlibsndfile1.0.25-10ubuntu0.16.04.3
Ubuntu 18.04 LTSlibsndfile1.0.28-4ubuntu0.18.04.1
Ubuntu Pro 14.04 LTSlibsndfile1.0.25-7ubuntu2.2+esm1
openSUSE Leap 15.2libsndfile1.0.28-lp152.6.3.1
openSUSE Leap 15.2libsndfile-progs1.0.28-lp152.6.3.1
openSUSE Leap 15.3libsndfile1.0.28-5.12.1
openSUSE Leap 15.3libsndfile-progs1.0.28-5.12.1
openSUSE Tumbleweedlibsndfile1.0.31-2.2