ELSA-2020-1175

Опубликовано: 06 апр. 2020

Источник: oracle-oval

Платформа: Oracle Linux 7

Описание

ELSA-2020-1175: taglib security update (LOW)

[1.8-8.20130218git]

Fixed OOB read when loading invalid ogg flac file Resolves: bz#1585260

Обновленные пакеты

Oracle Linux 7

Oracle Linux aarch64

taglib

1.8-8.20130218git.el7

taglib-devel

1.8-8.20130218git.el7

taglib-doc

1.8-8.20130218git.el7

Oracle Linux x86_64

taglib

1.8-8.20130218git.el7

taglib-devel

1.8-8.20130218git.el7

taglib-doc

1.8-8.20130218git.el7

Связанные CVE

CVE-2018-11439

Ссылки на источники

Связанные уязвимости

CVE-2018-11439

CVSS3: 6.5

ubuntu

больше 7 лет назад

The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted audio file.

CVE-2018-11439

CVSS3: 3.3

redhat

больше 7 лет назад

The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted audio file.

CVE-2018-11439

CVSS3: 6.5

nvd

больше 7 лет назад

The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted audio file.

CVE-2018-11439

CVSS3: 6.5

msrc

около 4 лет назад

The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted audio file.

CVE-2018-11439

CVSS3: 6.5

debian

больше 7 лет назад

The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLi ...