Test ID:	1.3.6.1.4.1.25623.1.0.70061
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-2288-1)
Summary:	The remote host is missing an update for the Debian 'libsndfile' package(s) announced via the DSA-2288-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'libsndfile' package(s) announced via the DSA-2288-1 advisory. Vulnerability Insight: Hossein Lotfi discovered an integer overflow in libsndfile's code to parse Paris Audio files, which could potentially lead to the execution of arbitrary code. For the oldstable distribution (lenny), this problem has been fixed in version 1.0.17-4+lenny3. For the stable distribution (squeeze), this problem has been fixed in version 1.0.21-3+squeeze1 For the unstable distribution (sid), this problem has been fixed in version 1.0.25-1. We recommend that you upgrade your libsndfile packages. Affected Software/OS: 'libsndfile' package(s) on Debian 5, Debian 6. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2696 45125 http://secunia.com/advisories/45125 45351 http://secunia.com/advisories/45351 45384 http://secunia.com/advisories/45384 45388 http://secunia.com/advisories/45388 45433 http://secunia.com/advisories/45433 48644 http://www.securityfocus.com/bid/48644 DSA-2288 http://www.debian.org/security/2011/dsa-2288 FEDORA-2011-9325 http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062955.html MDVSA-2011:119 http://www.mandriva.com/security/advisories?name=MDVSA-2011:119 RHSA-2011:1084 http://www.redhat.com/support/errata/RHSA-2011-1084.html USN-1174-1 http://www.ubuntu.com/usn/USN-1174-1 [oss-security] 20110714 CVE Request -- libsndfile -- Integer overflow by processing certain PAF files http://www.openwall.com/lists/oss-security/2011/07/14/1 [oss-security] 20110714 Re: CVE Request -- libsndfile -- Integer overflow by processing certain PAF files http://www.openwall.com/lists/oss-security/2011/07/14/2 http://www.openwall.com/lists/oss-security/2011/07/14/3 [oss-security] 20110714 Re: Re: CVE Request -- libsndfile -- Integer overflow by processing certain PAF files http://www.openwall.com/lists/oss-security/2011/07/14/4 [oss-security] 20110715 Re: CVE Request -- libsndfile -- Integer overflow by processing certain PAF files http://www.openwall.com/lists/oss-security/2011/07/15/1 [oss-security] 20110715 Re: Re: CVE Request -- libsndfile -- Integer overflow by processing certain PAF files http://www.openwall.com/lists/oss-security/2011/07/15/3 http://www.openwall.com/lists/oss-security/2011/07/15/4 [oss-security] 20110718 Re: CVE Request -- libsndfile -- Integer overflow by processing certain PAF files http://www.openwall.com/lists/oss-security/2011/07/18/1 http://www.mega-nerd.com/libsndfile/ChangeLog http://www.securelist.com/en/advisories/45125 https://bugs.gentoo.org/show_bug.cgi?id=375125 https://bugzilla.redhat.com/show_bug.cgi?id=721234 openSUSE-SU-2011:0855 https://hermes.opensuse.org/messages/10387521
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.