CVE-2015-7805

Publication date 17 November 2015

Last updated 24 July 2024


Ubuntu priority

Description

Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex value in the header in an AIFF file.

Read the notes from the security team

Status

Package Ubuntu Release Status
libsndfile 15.10 wily
Fixed in 1.0.25-9.1ubuntu0.15.10.1
15.04 vivid
Fixed in 1.0.25-9.1ubuntu0.15.04.1
14.04 LTS trusty
Fixed in 1.0.25-7ubuntu2.1
12.04 LTS precise
Fixed in 1.0.25-4ubuntu0.1

Notes


tyhicks

PoC available on exploit-db


Access our resources on patching vulnerabilities