CVE-2017-14245

Description

An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values.

References

https://usn.ubuntu.com/4013-1/

https://security.gentoo.org/glsa/202007-65

https://lists.debian.org/debian-lts-announce/2020/10/msg00030.html

https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html

https://github.com/erikd/libsndfile/issues/317

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3