5

CVE-2014-9756

Exploit

The psf_fwrite function in file_io.c in libsndfile allows attackers to cause a denial of service (divide-by-zero error and application crash) via unspecified vectors related to the headindex variable.

Data is provided by the National Vulnerability Database (NVD)
Libsndfile Project ≫ Libsndfile Version < 1.0.26
Canonical ≫ Ubuntu Linux Version12.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version14.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version15.04
Canonical ≫ Ubuntu Linux Version15.10
Opensuse ≫ Leap Version42.1
Opensuse ≫ Opensuse Version13.1
Opensuse ≫ Opensuse Version13.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.68% 0.707
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-369 Divide By Zero

The product divides a value by zero.

http://www.openwall.com/lists/oss-security/2014/12/24/3
Patch
Third Party Advisory
Mailing List
http://www.openwall.com/lists/oss-security/2015/11/03/9
Patch
Third Party Advisory
Mailing List
https://github.com/erikd/libsndfile/issues/92
Third Party Advisory
Exploit