CVE catalog
CVE-2017-17456
Security update for libsndfile
- Severity
- Low · CVSS 3.3
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Published
- Updated
- Source
- [NVD] · [CVE record]
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14245. Reason: This candidate is a duplicate of CVE-2017-14245. Notes: All CVE users should reference CVE-2017-14245 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Alpine | libsndfile | 3.10 | 1.0.28-r6 | fixed |
| Alpine | libsndfile | 3.11 | 1.0.28-r6 | fixed |
| Alpine | libsndfile | 3.12 | 1.0.28-r6 | fixed |
| Alpine | libsndfile | 3.13 | 1.0.28-r6 | fixed |
| Alpine | libsndfile | 3.14 | 1.0.28-r6 | fixed |
| Alpine | libsndfile | 3.15 | 1.0.28-r6 | fixed |
| Alpine | libsndfile | 3.16 | 1.0.28-r6 | fixed |
| Alpine | libsndfile | 3.17 | 1.0.28-r6 | fixed |
| Alpine | libsndfile | 3.18 | 1.0.28-r6 | fixed |
| Alpine | libsndfile | 3.19 | 1.0.28-r6 | fixed |
| Alpine | libsndfile | 3.20 | 1.0.28-r6 | fixed |
| Alpine | libsndfile | 3.21 | 1.0.28-r6 | fixed |
| Alpine | libsndfile | 3.22 | 1.0.28-r6 | fixed |
| Alpine | libsndfile | 3.23 | 1.0.28-r6 | fixed |
| Alpine | libsndfile | 3.24 | 1.0.28-r6 | fixed |
| Alpine | libsndfile | 3.5 | 1.0.28-r4 | fixed |
| Alpine | libsndfile | 3.6 | 1.0.28-r4 | fixed |
| Alpine | libsndfile | 3.7 | 1.0.28-r4 | fixed |
| Alpine | libsndfile | 3.8 | 1.0.28-r5 | fixed |
| Alpine | libsndfile | 3.9 | 1.0.28-r6 | fixed |
| Ubuntu | libsndfile | 16.04 | 1.0.25-9.1 | vulnerable |
| Ubuntu | libsndfile | 16.04 | 1.0.25-10 | vulnerable |
| Ubuntu | libsndfile | 16.04 | 1.0.25-10ubuntu0.16.04.1 | vulnerable |
| Ubuntu | libsndfile | 16.04 | 1.0.25-10ubuntu0.16.04.2 | fixed |
| Ubuntu | libsndfile | 18.04 | 1.0.28-4 | vulnerable |
| Ubuntu | libsndfile | 18.04 | 1.0.28-4ubuntu0.18.04.1 | fixed |
| Suse | libsndfile | linux enterprise module for basesystem 15 | 1.0.28-5.5.1 | fixed |
| Suse | libsndfile | linux enterprise desktop 12 sp3 | 1.0.25-36.13.1 | fixed |
| Suse | libsndfile | linux enterprise software development kit 12 sp3 | 1.0.25-36.13.1 | fixed |
| Suse | libsndfile | linux enterprise server 12 sp3 | 1.0.25-36.13.1 | fixed |
| Suse | libsndfile | linux enterprise server for sap applications 12 sp3 | 1.0.25-36.13.1 | fixed |
| Suse | libsndfile | linux enterprise software development kit 11 sp4 | 1.0.20-2.19.12.1 | fixed |
| Suse | libsndfile | linux enterprise server 11 sp4 | 1.0.20-2.19.12.1 | fixed |
| Suse | libsndfile | linux enterprise server for sap applications 11 sp4 | 1.0.20-2.19.12.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Alpine | libsndfile | apk | 3.10 | 1.0.28-r6 | Not reported | ALPINE-CVE-2017-17456 | Not reported |
| Alpine | libsndfile | apk | 3.11 | 1.0.28-r6 | Not reported | ALPINE-CVE-2017-17456 | Not reported |
| Alpine | libsndfile | apk | 3.12 | 1.0.28-r6 | Not reported | ALPINE-CVE-2017-17456 | Not reported |
| Alpine | libsndfile | apk | 3.13 | 1.0.28-r6 | Not reported | ALPINE-CVE-2017-17456 | Not reported |
| Alpine | libsndfile | apk | 3.14 | 1.0.28-r6 | Not reported | ALPINE-CVE-2017-17456 | Not reported |
| Alpine | libsndfile | apk | 3.15 | 1.0.28-r6 | Not reported | ALPINE-CVE-2017-17456 | Not reported |
| Alpine | libsndfile | apk | 3.16 | 1.0.28-r6 | Not reported | ALPINE-CVE-2017-17456 | Not reported |
| Alpine | libsndfile | apk | 3.17 | 1.0.28-r6 | Not reported | ALPINE-CVE-2017-17456 | Not reported |
| Alpine | libsndfile | apk | 3.18 | 1.0.28-r6 | Not reported | ALPINE-CVE-2017-17456 | Not reported |
| Alpine | libsndfile | apk | 3.19 | 1.0.28-r6 | Not reported | ALPINE-CVE-2017-17456 | Not reported |
| Alpine | libsndfile | apk | 3.20 | 1.0.28-r6 | Not reported | ALPINE-CVE-2017-17456 | Not reported |
| Alpine | libsndfile | apk | 3.21 | 1.0.28-r6 | Not reported | ALPINE-CVE-2017-17456 | Not reported |
| Alpine | libsndfile | apk | 3.22 | 1.0.28-r6 | Not reported | ALPINE-CVE-2017-17456 | Not reported |
| Alpine | libsndfile | apk | 3.23 | 1.0.28-r6 | Not reported | ALPINE-CVE-2017-17456 | Not reported |
| Alpine | libsndfile | apk | 3.24 | 1.0.28-r6 | Not reported | ALPINE-CVE-2017-17456 | Not reported |
| Alpine | libsndfile | apk | 3.5 | 1.0.28-r4 | Not reported | ALPINE-CVE-2017-17456 | Not reported |
| Alpine | libsndfile | apk | 3.6 | 1.0.28-r4 | Not reported | ALPINE-CVE-2017-17456 | Not reported |
| Alpine | libsndfile | apk | 3.7 | 1.0.28-r4 | Not reported | ALPINE-CVE-2017-17456 | Not reported |
| Alpine | libsndfile | apk | 3.8 | 1.0.28-r5 | Not reported | ALPINE-CVE-2017-17456 | Not reported |
| Alpine | libsndfile | apk | 3.9 | 1.0.28-r6 | Not reported | ALPINE-CVE-2017-17456 | Not reported |
| Ubuntu | libsndfile | deb | 16.04 | 1.0.25-10ubuntu0.16.04.2 | Not reported | UBUNTU-CVE-2017-17456 | Not reported |
| Ubuntu | libsndfile | deb | 18.04 | 1.0.28-4ubuntu0.18.04.1 | Not reported | UBUNTU-CVE-2017-17456 | Not reported |
| Suse | libsndfile | rpm | linux enterprise module for basesystem 15 | 1.0.28-5.5.1 | Not reported | SUSE-SU-2018:2074-1 | Not reported |
| Suse | libsndfile | rpm | linux enterprise desktop 12 sp3 | 1.0.25-36.13.1 | Not reported | SUSE-SU-2018:2065-1 | Not reported |
| Suse | libsndfile | rpm | linux enterprise software development kit 12 sp3 | 1.0.25-36.13.1 | Not reported | SUSE-SU-2018:2065-1 | Not reported |
| Suse | libsndfile | rpm | linux enterprise server 12 sp3 | 1.0.25-36.13.1 | Not reported | SUSE-SU-2018:2065-1 | Not reported |
| Suse | libsndfile | rpm | linux enterprise server for sap applications 12 sp3 | 1.0.25-36.13.1 | Not reported | SUSE-SU-2018:2065-1 | Not reported |
| Suse | libsndfile | rpm | linux enterprise software development kit 11 sp4 | 1.0.20-2.19.12.1 | Not reported | SUSE-SU-2019:14008-1 | Not reported |
| Suse | libsndfile | rpm | linux enterprise server 11 sp4 | 1.0.20-2.19.12.1 | Not reported | SUSE-SU-2019:14008-1 | Not reported |
| Suse | libsndfile | rpm | linux enterprise server for sap applications 11 sp4 | 1.0.20-2.19.12.1 | Not reported | SUSE-SU-2019:14008-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_2065-1.json]
- [https://osv.dev/vulnerability/ALPINE-CVE-2017-17456]
- [https://osv.dev/vulnerability/SUSE-SU-2018:2065-1]
- [https://osv.dev/vulnerability/SUSE-SU-2018:2074-1]
- [https://osv.dev/vulnerability/SUSE-SU-2019:14008-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2017-17456]
[OSV Package Vulnerability Database] · [SUSE security advisories and VEX]