This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2018-17095 →
DEBIAN-CVE-2018-17095
An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overfl...
Original description
The description as published by the source.
An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
audiofile
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-5"}]}]
Debian:13
audiofile
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-5"}]}]
Debian:14
audiofile
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-5"}]}]
References
- advisory security-tracker.debian.org