CVE-2017-14246
libsndfile1: An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack o...
CVE-2017-14246 is fixed in 2 products on 1 platform, first by libsndfile1 1.0.28-4ubuntu0.18.04.1, released March 20, 2019. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0223
82nd percentile
An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libsndfile1 · Ubuntu 18.04.6 LTS (bionic) | 1.0.28-4ubuntu0.18.04.1 | libsndfile1 1.0.28-4ubuntu0.18.04.1 | Mar 20, 2019 |
| sndfile-programs · Ubuntu 18.04.6 LTS (bionic) | 1.0.28-4ubuntu0.18.04.1 | sndfile-programs 1.0.28-4ubuntu0.18.04.1 | Mar 20, 2019 |