ALT-PU-2019-1138-1
Closed vulnerabilities
BDU:2020-03313
Уязвимость функции mapping0_forward (mapping0.c) мультимедийной библиотеки libvorbis, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
BDU:2020-03314
Уязвимость функции bark_noise_hybridmp (psy.c) мультимедийной библиотеки libvorbis, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2022-05863
Уязвимость функции bark_noise_hybridmp компонента psy.c мультимедийной библиотеки Vorbis, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2017-14160
The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact via a crafted mp4 file.
- http://openwall.com/lists/oss-security/2017/09/21/2
- http://openwall.com/lists/oss-security/2017/09/21/2
- 101045
- 101045
- [debian-lts-announce] 20191127 [SECURITY] [DLA 2013-1] libvorbis security update
- [debian-lts-announce] 20191127 [SECURITY] [DLA 2013-1] libvorbis security update
- [debian-lts-announce] 20211127 [SECURITY] [DLA 2828-1] libvorbis security update
- [debian-lts-announce] 20211127 [SECURITY] [DLA 2828-1] libvorbis security update
- GLSA-202003-36
- GLSA-202003-36
Modified: 2024-11-21
CVE-2018-10392
mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have unspecified other impact via a crafted file.
- RHSA-2019:3703
- RHSA-2019:3703
- https://gitlab.xiph.org/xiph/vorbis/issues/2335
- https://gitlab.xiph.org/xiph/vorbis/issues/2335
- [debian-lts-announce] 20191127 [SECURITY] [DLA 2013-1] libvorbis security update
- [debian-lts-announce] 20191127 [SECURITY] [DLA 2013-1] libvorbis security update
- [debian-lts-announce] 20211127 [SECURITY] [DLA 2828-1] libvorbis security update
- [debian-lts-announce] 20211127 [SECURITY] [DLA 2828-1] libvorbis security update
- GLSA-202003-36
- GLSA-202003-36
Modified: 2024-11-21
CVE-2018-10393
bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.
- RHSA-2019:3703
- RHSA-2019:3703
- https://gitlab.xiph.org/xiph/vorbis/issues/2334
- https://gitlab.xiph.org/xiph/vorbis/issues/2334
- [debian-lts-announce] 20191127 [SECURITY] [DLA 2013-1] libvorbis security update
- [debian-lts-announce] 20191127 [SECURITY] [DLA 2013-1] libvorbis security update
- [debian-lts-announce] 20211127 [SECURITY] [DLA 2828-1] libvorbis security update
- [debian-lts-announce] 20211127 [SECURITY] [DLA 2828-1] libvorbis security update
- GLSA-202003-36
- GLSA-202003-36