CVE:CVE-2017-7697
CNNVD:CNNVD-201704-578
libsamplerate是一个音频数据转换库。
libsamplerate 1.0.9之前的版本中的src_sinc.c文件的‘calc_output_single’函数存在安全漏洞。攻击者可借助特制的audio文件利用该漏洞造成缓冲区越边界读取。
solution:Upgrade libsamplerate_project libsamplerate to a higher version than 0.1.8,and avoid the version (,0.1.8]; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0