Описание
Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi->channels<=0, a similar issue to Mozilla bug 550184.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | released | 1.3.5-4ubuntu0.1 |
| devel | not-affected | 1.3.5-4.1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [1.3.2-1.3ubuntu1.1]] |
| esm-infra-legacy/xenial | released | 1.3.5-3ubuntu0.1 |
| esm-infra/xenial | released | 1.3.5-3ubuntu0.1 |
| precise/esm | DNE | |
| trusty | released | 1.3.2-1.3ubuntu1.1 |
| trusty/esm | DNE | trusty was released [1.3.2-1.3ubuntu1.1] |
| upstream | released | 1.3.5-4.1 |
| vivid/ubuntu-core | DNE |
Показывать по
EPSS
7.5 High
CVSS2
9.8 Critical
CVSS3
Связанные уязвимости
Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi->channels<=0, a similar issue to Mozilla bug 550184.
Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi->channels<=0, a similar issue to Mozilla bug 550184.
Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uni ...
Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi->channels<=0, a similar issue to Mozilla bug 550184.
EPSS
7.5 High
CVSS2
9.8 Critical
CVSS3