CVE-2017-6892 log
| Source |
|
| Severity | Medium |
| Remote | No |
| Type | Information disclosure |
| Description | In libsndfile version 1.0.28, an error in the "aiff_read_chanmap()" function (aiff.c) can be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-1550 | lib32-libsndfile | 1.0.28-3 | 1.0.31-1 | Medium | Fixed | FS#57434 |
| AVG-1549 | libsndfile | 1.0.28-3 | 1.0.31-1 | Medium | Fixed | FS#57434 |
| References |
|---|
https://github.com/libsndfile/libsndfile/commit/f833c53cb596e9e1792949f762e0b33661822748 |