CVE-2018-19661
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
libsndfile是软件开发者Erik de Castro Lopo所研发的一个通过标准接口读写AIFF、AU和WAV等格式的音频文件的C库。 libsndfile 1.0.28版本中的ulaw.c文件的‘i2ulaw_array’函数存在缓冲区越界读取漏洞。攻击者可利用该漏洞造成拒绝服务。
Possible ATT&CK Techniques 1 AI
T1027 · Obfuscated Files or Information
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2018-19661
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulaw_array in ulaw.c that will lead to a denial of service.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
libsndfile 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
libsndfile是软件开发者Erik de Castro Lopo所研发的一个通过标准接口读写AIFF、AU和WAV等格式的音频文件的C库。 libsndfile 1.0.28版本中的ulaw.c文件的‘i2ulaw_array’函数存在缓冲区越界读取漏洞。攻击者可利用该漏洞造成拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2018-19661
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-19661
请登录查看更多情报信息。
Vendor Advisories for CVE-2018-19661 (1)
Mailing List Discussions for CVE-2018-19661 (1)
Other References for CVE-2018-19661 (1)
-
https://github.com/erikd/libsndfile/issues/429 x_refsource_MISC
Same Patch Batch · n/a · 2018-11-29 · 28 CVEs total
| CVE-2018-11002 | Pulse Secure Desktop Client for Windows 安全漏洞 | |
| CVE-2018-19527 | i4 assistant 跨站脚本漏洞 | |
| CVE-2018-19497 | The Sleuth Kit 安全漏洞 | |
| CVE-2018-19752 | DomainMod 跨站脚本漏洞 | |
| CVE-2018-19751 | DomainMod 跨站脚本漏洞 | |
| CVE-2018-19750 | DomainMod 跨站脚本漏洞 | |
| CVE-2018-19749 | DomainMod 跨站脚本漏洞 | |
| CVE-2018-18619 | Advanced Comment SQL注入漏洞 | |
| CVE-2018-19748 | SDCMS 路径遍历漏洞 | |
| CVE-2018-19120 | KDE kio-extras HTML Thumbnailer插件信息泄露漏洞 | |
| CVE-2018-15537 | OCS Inventory NG ocsreports 安全漏洞 | |
| CVE-2018-15978 | Adobe Flash Player 缓冲区错误漏洞 | |
| CVE-2018-19693 | tp5cms 跨站脚本漏洞 | |
| CVE-2018-19692 | tp5cms 安全漏洞 | |
| CVE-2018-19622 | Wireshark MMSE解析器安全漏洞 | |
| CVE-2018-18649 | GitLab 输入验证错误漏洞 | |
| CVE-2018-19666 | OSSEC 路径遍历漏洞 | |
| CVE-2018-19664 | libjpeg-turbo 缓冲区错误漏洞 | |
| CVE-2018-19662 | libsndfile 缓冲区错误漏洞 | |
| CVE-2018-19655 | dcraw 缓冲区错误漏洞 |
Showing top 20 of 28 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2018-19661
No comments yet