Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-14633

Опубликовано: 21 сент. 2017
Источник: debian

Описание

In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis().

Пакеты

ПакетСтатусВерсия исправленияРелизТип
libvorbisfixed1.3.5-4.1package

Примечания

  • https://gitlab.xiph.org/xiph/vorbis/issues/2329

  • https://github.com/xiph/vorbis/pull/34

  • https://gitlab.xiph.org/xiph/vorbis/commit/a79ec216cd119069c68b8f3542c6a425a74ab993

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 8 лет назад

In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis().

CVSS3: 3.3
redhat
больше 8 лет назад

In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis().

CVSS3: 6.5
nvd
больше 8 лет назад

In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis().

CVSS3: 6.5
github
больше 3 лет назад

In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis().

suse-cvrf
около 8 лет назад

Security update for libvorbis