VulnerabilityModified

CVE-2014-9756

The psf_fwrite function in file_io.c in libsndfile allows attackers to cause a denial of service (divide-by-zero error and application crash) via unspecified vectors related to the headindex variable.

MEDIUM 5.0EPSS 2.83%

Does this matter?

Lower severity and a low EPSS score (2.83%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS: 2.83% probability · 86th percentile
CISA KEV: Not listed
Weakness: CWE-369
Affected: libsndfile project/libsndfile · canonical/ubuntu linux · opensuse/leap · opensuse/opensuse
Source: cve@mitre.org

References

http://lists.opensuse.org/opensuse-updates/2015-11/msg00077.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-11/msg00145.htmlMailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/12/24/3Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/11/03/9Mailing List, Patch, Third Party Advisory
http://www.ubuntu.com/usn/USN-2832-1Third Party Advisory
https://github.com/erikd/libsndfile/commit/725c7dbb95bfaf8b4bb7b04820e3a00cceea9ce6Patch, Third Party Advisory
https://github.com/erikd/libsndfile/issues/92Exploit, Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-11/msg00077.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-11/msg00145.htmlMailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/12/24/3Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/11/03/9Mailing List, Patch, Third Party Advisory
http://www.ubuntu.com/usn/USN-2832-1Third Party Advisory
https://github.com/erikd/libsndfile/commit/725c7dbb95bfaf8b4bb7b04820e3a00cceea9ce6Patch, Third Party Advisory
https://github.com/erikd/libsndfile/issues/92Exploit, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.