CVE:CVE-2014-9756
CNNVD:CNNVD-201511-331
libsndfile是软件开发者Erik de Castro Lopo所研发的一个通过标准接口读写AIFF、AU和WAV等格式的音频文件的C库。
libsndfile的file_io.c文件中的‘psf_fwrite’函数存在安全漏洞。攻击者可利用该漏洞造成拒绝服务（除零错误和应用程序崩溃）。
solution:Upgrade libsndfile_project libsndfile to a higher version than 1.0.26,and avoid the version (,1.0.26); Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.04,15.10,and avoid the version 12.04,14.04,15.04,15.10; Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2