NVD

Id
36187  
Name
CVE-2014-9496  
Description
The sd2_parse_rsrc_fork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a (1) map offset or (2) rsrc marker, which triggers an out-of-bounds read.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-01-16  
Modified Date
2016-12-06  
Seq
2014-9496  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
184910 36187 CVE-2014-9496 http://advisories.mageia.org/MGASA-2015-0015.html  View
184911 36187 CVE-2014-9496 openSUSE-SU-2015:0041  View
184912 36187 CVE-2014-9496 MDVSA-2015:024  View
184913 36187 CVE-2014-9496 [oss-security] 20150103 Re: Re: CVE Request: libsndfile buffer overread  View
184914 36187 CVE-2014-9496 http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html  View
184915 36187 CVE-2014-9496 71796  View
184916 36187 CVE-2014-9496 USN-2832-1  View
184917 36187 CVE-2014-9496 https://github.com/erikd/libsndfile/commit/dbe14f00030af5d3577f4cabbf9861db59e9c378  View
184918 36187 CVE-2014-9496 https://github.com/erikd/libsndfile/issues/93  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18844 JVNDB-2014-007719 libsndfile の sd2.c の sd2_parse_rsrc_fork 関数における脆弱性 libsndfile の sd2.c の sd2_parse_rsrc_fork 関数には、不特定の影響を受ける脆弱性が存在します。 CVE-2014-9496 76789 CVE-2014-9496 36187 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007719.html 2014-12-23 2015-05-14 View