CVE:CVE-2019-3832
CNNVD:CNNVD-201903-505
libsndfile是一款用于读取和写入包含采样音频数据的声音文件的AC库。
libsndfile中的wav.c文件的‘wav_write_header()’函数存在越界读取漏洞。攻击者可利用该漏洞造成拒绝服务或获取敏感信息。
solution:Upgrade libsndfile_project libsndfile to a higher version than 1.0.28,and avoid the version 1.0.28; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,18.10,and avoid the version 16.04,18.04,18.10