CVE-2018-19758 - log back

CVE-2018-19758 edited at 09 Feb 2021 10:14:02
Severity
- Unknown
+ Medium
Remote
- Unknown
+ Local
Type
- Unknown
+ Information disclosure
Description
+ There is a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a denial of service.
References
+ https://bugzilla.redhat.com/show_bug.cgi?id=1643812
+ https://github.com/libsndfile/libsndfile/issues/435
+ https://github.com/libsndfile/libsndfile/pull/439
+ https://github.com/libsndfile/libsndfile/commit/42132c543358cee9f7c3e9e9b15bb6c1063a608e
Notes
CVE-2018-19758 created at 09 Feb 2021 09:51:29