CVE-2017-8361

HIGH

libsndfile 1.0.28 - Buffer Overflow in FLAC Buffer Copy

Title source: llm

Description

The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file.

References (3)

Core 3

Core References

Patch, Third Party Advisory, VDB Entry x_refsource_misc

https://blogs.gentoo.org/ago/2017/04/29/libsndfile-global-buffer-overflow-in-flac_buffer_copy-flac-c/

Issue Tracking, Third Party Advisory mailing-list x_refsource_mlist

https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html

Third Party Advisory vendor-advisory x_refsource_gentoo

https://security.gentoo.org/glsa/201811-23

Scores

CVSS v3 8.8

EPSS 0.0390

EPSS Percentile 89.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-119

Status published

Products (2)

debian/debian_linux 8.0

libsndfile_project/libsndfile 1.0.28

Published Apr 30, 2017

Tracked Since Feb 18, 2026