CVE-2015-7805
libsndfile 1.0.25 - Local Heap Overflow
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
2Exploited in Wild
-Decision
Descriptions
Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex value in the header in an AIFF file.
Desbordamiento de buffer basado en memoria dinámica en libsndfile 1.0.25 permite a atacantes remotos tener un impacto no especificado a través de un valor headindex en la cabecera en un archivo AIFF.
It was discovered that libsndfile incorrectly handled memory when parsing malformed files. A remote attacker could use this issue to cause libsndfile to crash, resulting in a denial of service. This issue only applied to Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. Joshua Rogers discovered that libsndfile incorrectly handled division when parsing malformed files. A remote attacker could use this issue to cause libsndfile to crash, resulting in a denial of service. Various other issues were also addressed.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2015-10-09 CVE Reserved
- 2015-11-17 CVE Published
- 2024-08-06 CVE Updated
- 2024-08-06 First Exploit
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (13)
| URL | Tag | Source |
|---|---|---|
| http://www.nemux.org/2015/10/13/libsndfile-1-0-25-heap-overflow | X_refsource_misc | |
| http://www.openwall.com/lists/oss-security/2015/11/03/3 | Mailing List |
|
| http://www.openwall.com/lists/oss-security/2015/11/03/7 | Mailing List |
|
| http://www.securityfocus.com/bid/77427 | Vdb Entry |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/38447 | 2024-08-06 | |
| http://packetstormsecurity.com/files/133926/libsndfile-1.0.25-Heap-Overflow.html | 2024-08-06 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Opensuse Search vendor "Opensuse" | Opensuse Search vendor "Opensuse" for product "Opensuse" | 13.1 Search vendor "Opensuse" for product "Opensuse" and version "13.1" | - |
Affected
| ||||||
| Opensuse Search vendor "Opensuse" | Opensuse Search vendor "Opensuse" for product "Opensuse" | 13.2 Search vendor "Opensuse" for product "Opensuse" and version "13.2" | - |
Affected
| ||||||
| Mega-nerd Search vendor "Mega-nerd" | Libsndfile Search vendor "Mega-nerd" for product "Libsndfile" | 1.0.25 Search vendor "Mega-nerd" for product "Libsndfile" and version "1.0.25" | - |
Affected
| ||||||