Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2019-13220

Опубликовано: 15 авг. 2019
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5.8
CVSS3: 7.1

Описание

Use of uninitialized stack variables in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or disclose sensitive information by opening a crafted Ogg Vorbis file.

РелизСтатусПримечание
bionic

DNE

devel

not-affected

esm-apps/focal

not-affected

0.0~git20190817.1.052dce1-1
esm-infra-legacy/trusty

DNE

focal

not-affected

0.0~git20190817.1.052dce1-1
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

upstream

released

0.0~git20190817.1.052dce1-1
xenial

DNE

Показывать по

EPSS

Процентиль: 35%
0.00141
Низкий

5.8 Medium

CVSS2

7.1 High

CVSS3

Связанные уязвимости

CVSS3: 7.1
nvd
больше 6 лет назад

Use of uninitialized stack variables in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or disclose sensitive information by opening a crafted Ogg Vorbis file.

CVSS3: 7.1
debian
больше 6 лет назад

Use of uninitialized stack variables in the start_decoder function in ...

CVSS3: 7.1
github
больше 3 лет назад

Use of uninitialized stack variables in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or disclose sensitive information by opening a crafted Ogg Vorbis file.

suse-cvrf
около 1 года назад

Security update for stb

EPSS

Процентиль: 35%
0.00141
Низкий

5.8 Medium

CVSS2

7.1 High

CVSS3