Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-10392

Опубликовано: 26 апр. 2018
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 6.8
CVSS3: 8.8

Описание

mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have unspecified other impact via a crafted file.

РелизСтатусПримечание
artful

ignored

end of life
bionic

ignored

end of standard support, was needed
cosmic

not-affected

1.3.6-1
devel

not-affected

1.3.6-1
disco

not-affected

1.3.6-1
eoan

not-affected

1.3.6-1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was needed]
esm-infra/bionic

needed

esm-infra/focal

not-affected

1.3.6-1
esm-infra/xenial

released

1.3.5-3ubuntu0.2+esm1

Показывать по

EPSS

Процентиль: 79%
0.01361
Низкий

6.8 Medium

CVSS2

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 3.3
redhat
около 7 лет назад

mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have unspecified other impact via a crafted file.

CVSS3: 8.8
nvd
около 7 лет назад

mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have unspecified other impact via a crafted file.

CVSS3: 8.8
debian
около 7 лет назад

mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not va ...

suse-cvrf
почти 7 лет назад

Security update for libvorbis

suse-cvrf
около 7 лет назад

Security update for libvorbis

EPSS

Процентиль: 79%
0.01361
Низкий

6.8 Medium

CVSS2

8.8 High

CVSS3