Описание
bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.
A stack-based buffer overflow was found in the encoder functionality of the libvorbis library. An attacker could create a malicious file to cause a denial of service, crashing the application containing the library.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | libvorbis | Will not fix | ||
| Red Hat Enterprise Linux 6 | libvorbis | Will not fix | ||
| Red Hat Enterprise Linux 7 | libvorbis | Fix deferred | ||
| Red Hat Enterprise Linux 8 | libvorbis | Fixed | RHSA-2019:3703 | 05.11.2019 |
Показывать по
Дополнительная информация
Статус:
EPSS
7.3 High
CVSS3
Связанные уязвимости
bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.
bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.
bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-b ...
bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.
Уязвимость функции bark_noise_hybridmp (psy.c) мультимедийной библиотеки libvorbis, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
7.3 High
CVSS3