CVE-2014-9496
Low
Description
The sd2_parse_rsrc_fork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a (1) map offset or (2) rsrc marker, which triggers an out-of-bounds read.
SeverityLow
CVSS2.1
Exploit probability—
Product
Libsndfile
PublishedJan 16, 2015
First seenJan 16, 2015
How to fix
Update
- libsndfile_project libsndfile1.0.26 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libsndfile_project libsndfile | v < 1.0.26 | 1.0.26 |
| opensuse opensuse | 13.1, 13.2 | — |
| debian debian_linux | 9.0 | — |
| canonical ubuntu_linux | 12.04, 14.04, 15.04, 15.10 | — |
| oracle solaris | 11.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.