Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2017-6838

Integer overflow in sfcommands/sfconvert.c in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.

Related bugs and status

CVE-2017-6838 (Candidate) is related to these bugs:

Bug #1674005: audiofile: Multiple security issues from March 2017

		In	Importance	Status
1674005	audiofile: Multiple security issues from March 2017	audiofile (Ubuntu)	Medium	Fix Released
1674005	audiofile: Multiple security issues from March 2017	audiofile (Ubuntu Yakkety)	Medium	Fix Released
1674005	audiofile: Multiple security issues from March 2017	audiofile (Ubuntu Xenial)	Medium	Fix Released
1674005	audiofile: Multiple security issues from March 2017	audiofile (Ubuntu Trusty)	Medium	Fix Released
1674005	audiofile: Multiple security issues from March 2017	audiofile (Ubuntu Precise)	Medium	Fix Released

See the

CVE page on Mitre.org for more details.

References

MLIST: [oss-security] 2017031...
MISC: https://blogs.gentoo.o...
MISC: https://github.com/ant...
MISC: https://github.com/mpr...
DEBIAN: DSA-3814