CVE-2023-45680

2023-10-2100:15:09

Debian Security Bug Tracker

security-tracker.debian.org

cve-2023-45680

memory allocation failure

start_decoder

f->comment_list

null pointer

denial of service

mit licensed

ogg vorbis

unix

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

Percentile

10.1%

JSON

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in start_decoder. In that case the function returns early, the f->comment_list is set to NULL, but f->comment_list_length is not reset. Later in vorbis_deinit it tries to dereference the NULL pointer. This issue may lead to denial of service.

OSVersionArchitecturePackageVersionFilename
Debian12alllibstb<= 0.0~git20220908.8b5f1f3+ds-1libstb_0.0~git20220908.8b5f1f3+ds-1_all.deb
Debian11alllibstb<= 0.0~git20200713.b42009b+ds-1libstb_0.0~git20200713.b42009b+ds-1_all.deb
Debian999alllibstb<= 0.0~git20240715.f7f20f39fe4f+ds-1libstb_0.0~git20240715.f7f20f39fe4f+ds-1_all.deb
Debian13alllibstb<= 0.0~git20240715.f7f20f39fe4f+ds-1libstb_0.0~git20240715.f7f20f39fe4f+ds-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libstb	<= 0.0~git20220908.8b5f1f3+ds-1	libstb_0.0~git20220908.8b5f1f3+ds-1_all.deb
Debian	11	all	libstb	<= 0.0~git20200713.b42009b+ds-1	libstb_0.0~git20200713.b42009b+ds-1_all.deb
Debian	999	all	libstb	<= 0.0~git20240715.f7f20f39fe4f+ds-1	libstb_0.0~git20240715.f7f20f39fe4f+ds-1_all.deb
Debian	13	all	libstb	<= 0.0~git20240715.f7f20f39fe4f+ds-1	libstb_0.0~git20240715.f7f20f39fe4f+ds-1_all.deb