Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-2009
HistoryMay 16, 2008 - 12:54 p.m.

CVE-2008-2009

2008-05-1612:54:00
[email protected]
web.nvd.nist.gov
2

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.7 Medium

AI Score

Confidence

High

0.033 Low

EPSS

Percentile

91.3%

JSON

Xiph.org libvorbis before 1.0 does not properly check for underpopulated Huffman trees, which allows remote attackers to cause a denial of service (crash) via a crafted OGG file that triggers memory corruption during execution of the _make_decode_tree function.

Affected configurations

NVD
Node
xiph.orglibvorbisMatch1.0beta4
OR
xiph.orglibvorbisMatch1.0rc1
OR
xiph.orglibvorbisMatch1.0rc2
Node
canonicalubuntu_linuxMatch8.04lts
OR
canonicalubuntu_linuxMatch8.10
OR
canonicalubuntu_linuxMatch9.04
OR
canonicalubuntu_linuxMatch9.10

Related

cve 1
ubuntucve 1
cvelist 1
veracode 1
prion 1
debiancve 1
securityvulns 2
nessus 3
openvas 6
ubuntu 1
redhat 1
centos 1
freebsd 1
cve
cve
CVE-2008-2009
2008-05-16 12:54:00
ubuntucve
ubuntucve
CVE-2008-2009
2008-05-16 00:00:00
cvelist
cvelist
CVE-2008-2009
2008-05-16 06:54:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:23:05
prion
prion
Memory corruption
2008-05-16 12:54:00
debiancve
debiancve
CVE-2008-2009
2008-05-16 12:54:00
securityvulns
securityvulns
libvorbis library multiple security vulnerabilities
2009-11-25 00:00:00
[USN-861-1] libvorbis vulnerabilities
2009-11-25 00:00:00
nessus
nessus
Ubuntu 8.04 LTS / 8.10 / 9.04 / 9.10 : libvorbis vulnerabilities (USN-861-1)
2009-11-25 00:00:00
RHEL 2.1 : libvorbis (RHSA-2008:0271)
2008-05-16 00:00:00
FreeBSD : libtremor -- multiple vulnerabilities (3dac84c9-bce1-4199-9784-d68af1eb7b2e)
2015-08-26 00:00:00
openvas
openvas
Ubuntu USN-861-1 (libvorbis)
2009-12-03 00:00:00
Ubuntu: Security Advisory (USN-861-1)
2009-12-03 00:00:00
CentOS Update for libvorbis CESA-2008:0271-01 centos2 i386
2009-02-27 00:00:00
ubuntu
ubuntu
libvorbis vulnerabilities
2009-11-24 00:00:00
redhat
redhat
(RHSA-2008:0271) Important: libvorbis security update
2008-05-14 00:00:00
centos
centos
libvorbis security update
2008-05-16 03:59:20
freebsd
freebsd
libtremor -- multiple vulnerabilities
2008-03-19 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.7 Medium

AI Score

Confidence

High

0.033 Low

EPSS

Percentile

91.3%

JSON
Related for NVD:CVE-2008-2009
cve1ubuntucve1cvelist1veracode1prion1debiancve1securityvulns2nessus3openvas6ubuntu1redhat1centos1freebsd1