CVE-2017-14632

2017-09-2107:29:00

Alpine Linux Development Team

security.alpinelinux.org

0.036 Low

EPSS

Percentile

91.6%

JSON

Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi->channels<=0, a similar issue to Mozilla bug 550184.

OSVersionArchitecturePackageVersionFilename
Alpineedge-mainnoarchlibvorbis< 1.3.5-r4UNKNOWN
Alpine3.10-mainnoarchlibvorbis< 1.3.5-r4UNKNOWN
Alpine3.11-mainnoarchlibvorbis< 1.3.5-r4UNKNOWN
Alpine3.12-mainnoarchlibvorbis< 1.3.5-r4UNKNOWN
Alpine3.13-mainnoarchlibvorbis< 1.3.5-r4UNKNOWN
Alpine3.14-mainnoarchlibvorbis< 1.3.5-r4UNKNOWN
Alpine3.15-mainnoarchlibvorbis< 1.3.5-r4UNKNOWN
Alpine3.16-mainnoarchlibvorbis< 1.3.5-r4UNKNOWN
Alpine3.17-mainnoarchlibvorbis< 1.3.5-r4UNKNOWN
Alpine3.18-mainnoarchlibvorbis< 1.3.5-r4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-main	noarch	libvorbis	< 1.3.5-r4	UNKNOWN
Alpine	3.10-main	noarch	libvorbis	< 1.3.5-r4	UNKNOWN
Alpine	3.11-main	noarch	libvorbis	< 1.3.5-r4	UNKNOWN
Alpine	3.12-main	noarch	libvorbis	< 1.3.5-r4	UNKNOWN
Alpine	3.13-main	noarch	libvorbis	< 1.3.5-r4	UNKNOWN
Alpine	3.14-main	noarch	libvorbis	< 1.3.5-r4	UNKNOWN
Alpine	3.15-main	noarch	libvorbis	< 1.3.5-r4	UNKNOWN
Alpine	3.16-main	noarch	libvorbis	< 1.3.5-r4	UNKNOWN
Alpine	3.17-main	noarch	libvorbis	< 1.3.5-r4	UNKNOWN
Alpine	3.18-main	noarch	libvorbis	< 1.3.5-r4	UNKNOWN