CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-7586

In libsndfile before 1.0.28, an error in the "header_read()" function (common.c) when handling ID3 tags can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 55.7%

CVSS Severity

CVSS v3 Score 5.5

CVSS v2 Score 4.3

References

Products affected by CVE-2017-7586

Libsndfile Project » Libsndfile » Version: N/A

cpe:2.3:a:libsndfile_project:libsndfile:-
Libsndfile Project » Libsndfile » Version: 0.0.28

cpe:2.3:a:libsndfile_project:libsndfile:0.0.28
Libsndfile Project » Libsndfile » Version: 0.0.8

cpe:2.3:a:libsndfile_project:libsndfile:0.0.8
Libsndfile Project » Libsndfile » Version: 1.0.0

cpe:2.3:a:libsndfile_project:libsndfile:1.0.0
Libsndfile Project » Libsndfile » Version: 1.0.1

cpe:2.3:a:libsndfile_project:libsndfile:1.0.1
Libsndfile Project » Libsndfile » Version: 1.0.10

cpe:2.3:a:libsndfile_project:libsndfile:1.0.10
Libsndfile Project » Libsndfile » Version: 1.0.11

cpe:2.3:a:libsndfile_project:libsndfile:1.0.11
Libsndfile Project » Libsndfile » Version: 1.0.12

cpe:2.3:a:libsndfile_project:libsndfile:1.0.12
Libsndfile Project » Libsndfile » Version: 1.0.13

cpe:2.3:a:libsndfile_project:libsndfile:1.0.13
Libsndfile Project » Libsndfile » Version: 1.0.14

cpe:2.3:a:libsndfile_project:libsndfile:1.0.14
Libsndfile Project » Libsndfile » Version: 1.0.15

cpe:2.3:a:libsndfile_project:libsndfile:1.0.15
Libsndfile Project » Libsndfile » Version: 1.0.16

cpe:2.3:a:libsndfile_project:libsndfile:1.0.16
Libsndfile Project » Libsndfile » Version: 1.0.17

cpe:2.3:a:libsndfile_project:libsndfile:1.0.17
Libsndfile Project » Libsndfile » Version: 1.0.18

cpe:2.3:a:libsndfile_project:libsndfile:1.0.18
Libsndfile Project » Libsndfile » Version: 1.0.19

cpe:2.3:a:libsndfile_project:libsndfile:1.0.19
Libsndfile Project » Libsndfile » Version: 1.0.2

cpe:2.3:a:libsndfile_project:libsndfile:1.0.2
Libsndfile Project » Libsndfile » Version: 1.0.20

cpe:2.3:a:libsndfile_project:libsndfile:1.0.20
Libsndfile Project » Libsndfile » Version: 1.0.21

cpe:2.3:a:libsndfile_project:libsndfile:1.0.21
Libsndfile Project » Libsndfile » Version: 1.0.22

cpe:2.3:a:libsndfile_project:libsndfile:1.0.22
Libsndfile Project » Libsndfile » Version: 1.0.23

cpe:2.3:a:libsndfile_project:libsndfile:1.0.23
Libsndfile Project » Libsndfile » Version: 1.0.24

cpe:2.3:a:libsndfile_project:libsndfile:1.0.24
Libsndfile Project » Libsndfile » Version: 1.0.25

cpe:2.3:a:libsndfile_project:libsndfile:1.0.25
Libsndfile Project » Libsndfile » Version: 1.0.26

cpe:2.3:a:libsndfile_project:libsndfile:1.0.26
Libsndfile Project » Libsndfile » Version: 1.0.27

cpe:2.3:a:libsndfile_project:libsndfile:1.0.27
Libsndfile Project » Libsndfile » Version: 1.0.3

cpe:2.3:a:libsndfile_project:libsndfile:1.0.3
Libsndfile Project » Libsndfile » Version: 1.0.4

cpe:2.3:a:libsndfile_project:libsndfile:1.0.4
Libsndfile Project » Libsndfile » Version: 1.0.5

cpe:2.3:a:libsndfile_project:libsndfile:1.0.5
Libsndfile Project » Libsndfile » Version: 1.0.6

cpe:2.3:a:libsndfile_project:libsndfile:1.0.6
Libsndfile Project » Libsndfile » Version: 1.0.7

cpe:2.3:a:libsndfile_project:libsndfile:1.0.7
Libsndfile Project » Libsndfile » Version: 1.0.8

cpe:2.3:a:libsndfile_project:libsndfile:1.0.8
Libsndfile Project » Libsndfile » Version: 1.0.9

cpe:2.3:a:libsndfile_project:libsndfile:1.0.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-7586

Products

Pricing

Contact Us