FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-05-02 10:37:19 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
086c96cd-d0cb-11ea-b922-5404a68ad561	libsndfile -- out-of-bounds read memory access RedHat reports: It was discovered the fix for CVE-2018-19758 was not complete and still allows a read beyond the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this flaw to make the application crash. Discovery 2019-02-14 Entry 2020-07-28 libsndfile < 1.0.29.p.20200620 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3832
4ade0c4d-7e83-11ee-9a8c-00155d01f201	libsndfile_project -- Integer overflow in dataend calculation cve@mitre.org reports: Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts. Discovery 2023-07-18 Entry 2023-11-08 libsndfile < 1.2.2_1 CVE-2022-33065 https://nvd.nist.gov/vuln/detail/CVE-2022-33065

VuXML ID

Description

086c96cd-d0cb-11ea-b922-5404a68ad561

libsndfile -- out-of-bounds read memory access

RedHat reports:

It was discovered the fix for CVE-2018-19758 was not complete and still allows a read beyond the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this flaw to make the application crash.

Discovery 2019-02-14
Entry 2020-07-28
libsndfile

< 1.0.29.p.20200620

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3832

4ade0c4d-7e83-11ee-9a8c-00155d01f201

libsndfile_project -- Integer overflow in dataend calculation

cve@mitre.org reports:

Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.

Discovery 2023-07-18
Entry 2023-11-08
libsndfile

< 1.2.2_1

CVE-2022-33065
https://nvd.nist.gov/vuln/detail/CVE-2022-33065