Lucene search
Veracode Vulnerability DatabaseVERACODE:7462HistorySep 12, 2018 - 1:32 a.m.
Denial Of Service (DoS)
2018-09-1201:32:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
EPSS
0.007
Percentile
80.3%
libvorbis.so is vulnerable to denial of service. A remote attacker is able to cause an application crash via a crafted mp4 file from an out-of-bounds access in the bark_noise_hybridmp function in psy.c.
References
openwall.com/lists/oss-security/2017/09/21/2
www.securityfocus.com/bid/101045
github.com/xiph/vorbis/commit/018ca26dece618457dd13585cad52941193c4a25
github.com/xiph/vorbis/issues/39
gitlab.xiph.org/xiph/vorbis/issues/2330
lists.debian.org/debian-lts-announce/2019/11/msg00031.html
lists.debian.org/debian-lts-announce/2021/11/msg00023.html
security.gentoo.org/glsa/202003-36
Related
redhatcve
redhatcve
CVE-2017-14160
2017-10-09 15:51:10
debiancve
debiancve
CVE-2017-14160
2017-09-21 14:29:00
alpinelinux
alpinelinux
CVE-2017-14160
2017-09-21 14:29:00
nvd
nvd
CVE-2017-14160
2017-09-21 14:29:00
prion
prion
Out-of-bounds
2017-09-21 14:29:00
openvas
openvas
Huawei EulerOS: Security Advisory for libvorbis (EulerOS-SA-2021-2304)
2021-08-09 00:00:00
Huawei EulerOS: Security Advisory for libvorbis (EulerOS-SA-2018-1018)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for libvorbis (EulerOS-SA-2022-1080)
2022-02-13 00:00:00
osv
osv
CVE-2017-14160
2017-09-21 14:29:00
libvorbis - security update
2019-11-27 00:00:00
libvorbis vulnerabilities
2022-05-12 15:44:18
nessus
nessus
EulerOS 2.0 SP8 : libvorbis (EulerOS-SA-2021-2304)
2021-08-09 00:00:00
EulerOS 2.0 SP1 : libvorbis (EulerOS-SA-2018-1018)
2018-01-19 00:00:00
EulerOS Virtualization 3.0.6.0 : libvorbis (EulerOS-SA-2022-1080)
2022-02-13 00:00:00
cve
cve
CVE-2017-14160
2017-09-21 14:29:00
cvelist
cvelist
CVE-2017-14160
2017-09-21 14:00:00
freebsd
freebsd
libvorbis -- two vulnerabilities
2017-09-21 00:00:00
ubuntucve
ubuntucve
CVE-2017-14160
2017-09-21 00:00:00
CVE-2018-10393
2018-04-26 00:00:00
suse
suse
Security update for libvorbis (moderate)
2018-05-18 18:07:41
slackware
slackware
[slackware-security] libvorbis
2020-07-04 19:17:27
mageia
mageia
Updated libvorbis packages fix security vulnerabilities
2018-06-25 01:02:29
debian
debian
[SECURITY] [DLA 2013-1] libvorbis security update
2019-11-27 21:39:56
[SECURITY] [DLA 2828-1] libvorbis security update
2021-11-27 19:38:58
oraclelinux
oraclelinux
libvorbis security update
2019-11-14 00:00:00
gentoo
gentoo
libvorbis: Multiple vulnerabilities
2020-03-16 00:00:00
ubuntu
ubuntu
Vorbis vulnerabilities
2022-05-12 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: libvorbis-1.3.6-3.fc28
2018-08-03 20:51:09
[SECURITY] Fedora 29 Update: mingw-libvorbis-1.3.6-2.fc29
2019-01-22 17:42:50