Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:1565-1

Опубликовано: 07 июн. 2018
Источник: suse-cvrf

Описание

Security update for libvorbis

This update for libvorbis fixes the following issues:

The following security issue was fixed:

  • Fixed the validation of channels in mapping0_forward(), which previously allowed remote attackers to cause a denial of service via specially crafted files (CVE-2018-10392, bsc#1091070)

Список пакетов

SUSE Linux Enterprise Desktop 12 SP3
libvorbis0-1.3.3-10.14.1
libvorbis0-32bit-1.3.3-10.14.1
libvorbisenc2-1.3.3-10.14.1
libvorbisenc2-32bit-1.3.3-10.14.1
libvorbisfile3-1.3.3-10.14.1
libvorbisfile3-32bit-1.3.3-10.14.1
SUSE Linux Enterprise Server 12 SP3
libvorbis-doc-1.3.3-10.14.1
libvorbis0-1.3.3-10.14.1
libvorbis0-32bit-1.3.3-10.14.1
libvorbisenc2-1.3.3-10.14.1
libvorbisenc2-32bit-1.3.3-10.14.1
libvorbisfile3-1.3.3-10.14.1
libvorbisfile3-32bit-1.3.3-10.14.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
libvorbis-doc-1.3.3-10.14.1
libvorbis0-1.3.3-10.14.1
libvorbis0-32bit-1.3.3-10.14.1
libvorbisenc2-1.3.3-10.14.1
libvorbisenc2-32bit-1.3.3-10.14.1
libvorbisfile3-1.3.3-10.14.1
libvorbisfile3-32bit-1.3.3-10.14.1
SUSE Linux Enterprise Software Development Kit 12 SP3
libvorbis-devel-1.3.3-10.14.1

Ссылки

Описание

mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have unspecified other impact via a crafted file.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP3:libvorbis0-1.3.3-10.14.1
SUSE Linux Enterprise Desktop 12 SP3:libvorbis0-32bit-1.3.3-10.14.1
SUSE Linux Enterprise Desktop 12 SP3:libvorbisenc2-1.3.3-10.14.1
SUSE Linux Enterprise Desktop 12 SP3:libvorbisenc2-32bit-1.3.3-10.14.1
Ссылки