In libsamplerate before 0.1.9, a buffer over-read occurs in the calc_output_single function in src_sinc.c via a crafted audio file.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - libsamplerate: Buffer overflow in calc_output_single (CVE-2017-7697)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - libsamplerate: Buffer overflow in calc_output_single (CVE-2017-7697)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5749-1 advisory.

    Erik de Castro Lopo and Agostino Sarubbo discovered that libsamplerate did not properly perform bounds     checking. If a user were tricked into processing a specially crafted audio file, an attacker could     possibly use this issue to cause a crash.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2845 advisory.

  - In libsamplerate before 0.1.9, a buffer over-read occurs in the calc_output_single function in src_sinc.c     via a crafted audio file. (CVE-2017-7697)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the libsamplerate package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In libsamplerate before 0.1.9, a buffer over-read     occurs in the calc_output_single function in src_sinc.c     via a crafted audio file.(CVE-2017-7697)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New upstream bug fix release. This version includes a fix for CVE-2017-7697.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

NVD reports :

In libsamplerate before 0.1.9, a buffer over-read occurs in the calc_output_single function in src_sinc.c via a crafted audio file.

This update for libsamplerate fixes the following issues :

  - CVE-2017-7697: Fixed a buffer overflow in     calc_output_single. (bsc#1033564)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
198979	RHEL 6 : libsamplerate (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
198897	RHEL 7 : libsamplerate (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
196880	RHEL 6 : libsamplerate (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	medium
196812	RHEL 7 : libsamplerate (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	medium
168279	Ubuntu 16.04 ESM : libsamplerate vulnerability (USN-5749-1)	Nessus	Ubuntu Local Security Checks	medium
156159	Debian DLA-2845-1 : libsamplerate - LTS security update	Nessus	Debian Local Security Checks	medium
132150	EulerOS 2.0 SP3 : libsamplerate (EulerOS-SA-2019-2615)	Nessus	Huawei Local Security Checks	medium
131890	EulerOS 2.0 SP2 : libsamplerate (EulerOS-SA-2019-2398)	Nessus	Huawei Local Security Checks	medium
130879	EulerOS 2.0 SP5 : libsamplerate (EulerOS-SA-2019-2170)	Nessus	Huawei Local Security Checks	medium
107159	Fedora 26 : libsamplerate (2018-2012089e37)	Nessus	Fedora Local Security Checks	medium
107029	Fedora 27 : libsamplerate (2018-418e67c843)	Nessus	Fedora Local Security Checks	medium
99558	FreeBSD : libsamplerate -- multiple vulnerabilities (d44129d6-b22e-4e9c-b200-6a46e8bd3e60)	Nessus	FreeBSD Local Security Checks	medium
99508	SUSE SLES11 Security Update : libsamplerate (SUSE-SU-2017:1065-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2017-7697

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium