CVE-2017-8362 log

Source	CVE Red Hat MITRE NVD Debian Ubuntu SUSE Alpine Mageia CVE Details CIRCL Bugs Arch Linux Red Hat Gentoo SUSE GitHub Lists oss-security full-disclosure bugtraq Misc GitHub code web search
Severity	Low
Remote	No
Type	Denial of service
Description	The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted audio file.

Group	Package	Affected	Fixed	Severity	Status	Ticket
AVG-1550	lib32-libsndfile	1.0.28-3	1.0.31-1	Medium	Fixed	FS#57434
AVG-1549	libsndfile	1.0.28-3	1.0.31-1	Medium	Fixed	FS#57434

References
https://blogs.gentoo.org/ago/2017/04/29/libsndfile-invalid-memory-read-in-flac_buffer_copy-flac-c/ https://github.com/libsndfile/libsndfile/issues/231 https://github.com/libsndfile/libsndfile/commit/ef1dbb2df1c0e741486646de40bd638a9c4cd808

References

https://blogs.gentoo.org/ago/2017/04/29/libsndfile-invalid-memory-read-in-flac_buffer_copy-flac-c/
https://github.com/libsndfile/libsndfile/issues/231
https://github.com/libsndfile/libsndfile/commit/ef1dbb2df1c0e741486646de40bd638a9c4cd808