Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-14633

Опубликовано: 21 сент. 2017
Источник: debian
EPSS Низкий

Описание

In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis().

Пакеты

ПакетСтатусВерсия исправленияРелизТип
libvorbisfixed1.3.5-4.1package

Примечания

  • https://gitlab.xiph.org/xiph/vorbis/issues/2329

  • https://github.com/xiph/vorbis/pull/34

  • https://gitlab.xiph.org/xiph/vorbis/commit/a79ec216cd119069c68b8f3542c6a425a74ab993

EPSS

Процентиль: 79%
0.01921
Низкий

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 9 лет назад

In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis().

CVSS3: 3.3
redhat
около 9 лет назад

In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis().

CVSS3: 6.5
nvd
почти 9 лет назад

In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis().

CVSS3: 6.5
github
больше 4 лет назад

In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis().

suse-cvrf
больше 8 лет назад

Security update for libvorbis

EPSS

Процентиль: 79%
0.01921
Низкий