Lucene search
Veracode Vulnerability DatabaseVERACODE:6232HistoryMay 03, 2018 - 5:03 a.m.
Buffer Overread
2018-05-0305:03:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
EPSS
0.005
Percentile
76.8%
libvorbis.so is vulnerable to buffer overreads. The application lacks an array length check in the bark_noise_hybridmp method in psy.c, leading to a buffer overread that can lead to sensitive information being disclosed or the application crashing.
Related
cvelist
cvelist
CVE-2018-10393
2018-04-26 05:00:00
nvd
nvd
CVE-2018-10393
2018-04-26 05:29:00
cbl_mariner
cbl_mariner
CVE-2018-10393 affecting package libvorbis for versions less than 1.3.7-1
2023-10-11 02:36:02
redhatcve
redhatcve
CVE-2018-10393
2018-05-02 19:49:25
alpinelinux
alpinelinux
CVE-2018-10393
2018-04-26 05:29:00
prion
prion
Stack overflow
2018-04-26 05:29:00
osv
osv
CVE-2018-10393
2018-04-26 05:29:00
Low: libvorbis security update
2019-11-05 20:52:55
Low: libvorbis security update
2019-11-05 20:52:55
cve
cve
CVE-2018-10393
2018-04-26 05:29:00
debiancve
debiancve
CVE-2018-10393
2018-04-26 05:29:00
nessus
nessus
SUSE SLES11 Security Update : libvorbis (SUSE-SU-2018:1321-1)
2018-05-17 00:00:00
EulerOS 2.0 SP9 : libvorbis (EulerOS-SA-2021-2248)
2021-08-09 00:00:00
SUSE SLED12 / SLES12 Security Update : libvorbis (SUSE-SU-2018:1324-1)
2018-05-17 00:00:00
openvas
openvas
openSUSE: Security Advisory for libvorbis (openSUSE-SU-2018:1345-1)
2018-05-19 00:00:00
Huawei EulerOS: Security Advisory for libvorbis (EulerOS-SA-2021-2248)
2021-08-09 00:00:00
Huawei EulerOS: Security Advisory for libvorbis (EulerOS-SA-2020-1972)
2020-09-08 00:00:00
rocky
rocky
libvorbis security update
2019-11-05 20:52:55
almalinux
almalinux
Low: libvorbis security update
2019-11-05 20:52:55
ubuntucve
ubuntucve
CVE-2018-10393
2018-04-26 00:00:00
CVE-2017-14160
2017-09-21 00:00:00
slackware
slackware
[slackware-security] libvorbis
2020-07-04 19:17:27
redhat
redhat
(RHSA-2019:3703) Low: libvorbis security update
2019-11-05 20:52:55
suse
suse
Security update for libvorbis (moderate)
2018-05-18 18:07:41
oraclelinux
oraclelinux
libvorbis security update
2019-11-14 00:00:00
gentoo
gentoo
libvorbis: Multiple vulnerabilities
2020-03-16 00:00:00
ubuntu
ubuntu
Vorbis vulnerabilities
2022-05-12 00:00:00
mageia
mageia
Updated libvorbis packages fix security vulnerabilities
2018-06-25 01:02:29
debian
debian
[SECURITY] [DLA 2013-1] libvorbis security update
2019-11-27 21:39:56
[SECURITY] [DLA 2828-1] libvorbis security update
2021-11-27 19:38:58
fedora
fedora
[SECURITY] Fedora 28 Update: libvorbis-1.3.6-3.fc28
2018-08-03 20:51:09
[SECURITY] Fedora 29 Update: mingw-libvorbis-1.3.6-2.fc29
2019-01-22 17:42:50