suse · CVE-2017-16942

Quick triage

Priority: medium Published: 2021-05-30 14:04:27 UTC Updated: 2025-03-25 00:43:51 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2017-16942 severity moderate: SUSE including 10 source package names (libsndfile-1.0.20-2.19.7.3, libsndfile-32bit-1.0.20-2.19.7.3, …), 38 product×package rows across 21 product lines (SUSE Linux Enterprise Desktop 12 SP2, SUSE Linux Enterprise Desktop 12 SP3, … (21 product lines)): Fixed 38.

Description:

In libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists in the function wav_w64_read_fmt_chunk() in wav_w64.c, which may lead to DoS when playing a crafted audio file.

cvelogic Threat Intelligence