CVE-2017-14633

2017-09-2107:29:00

Alpine Linux Development Team

security.alpinelinux.org

0.004 Low

EPSS

Percentile

72.1%

JSON

In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis().

OSVersionArchitecturePackageVersionFilename
Alpineedge-mainnoarchlibvorbis< 1.3.5-r4UNKNOWN
Alpine3.10-mainnoarchlibvorbis< 1.3.5-r4UNKNOWN
Alpine3.11-mainnoarchlibvorbis< 1.3.5-r4UNKNOWN
Alpine3.12-mainnoarchlibvorbis< 1.3.5-r4UNKNOWN
Alpine3.13-mainnoarchlibvorbis< 1.3.5-r4UNKNOWN
Alpine3.14-mainnoarchlibvorbis< 1.3.5-r4UNKNOWN
Alpine3.15-mainnoarchlibvorbis< 1.3.5-r4UNKNOWN
Alpine3.16-mainnoarchlibvorbis< 1.3.5-r4UNKNOWN
Alpine3.17-mainnoarchlibvorbis< 1.3.5-r4UNKNOWN
Alpine3.18-mainnoarchlibvorbis< 1.3.5-r4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-main	noarch	libvorbis	< 1.3.5-r4	UNKNOWN
Alpine	3.10-main	noarch	libvorbis	< 1.3.5-r4	UNKNOWN
Alpine	3.11-main	noarch	libvorbis	< 1.3.5-r4	UNKNOWN
Alpine	3.12-main	noarch	libvorbis	< 1.3.5-r4	UNKNOWN
Alpine	3.13-main	noarch	libvorbis	< 1.3.5-r4	UNKNOWN
Alpine	3.14-main	noarch	libvorbis	< 1.3.5-r4	UNKNOWN
Alpine	3.15-main	noarch	libvorbis	< 1.3.5-r4	UNKNOWN
Alpine	3.16-main	noarch	libvorbis	< 1.3.5-r4	UNKNOWN
Alpine	3.17-main	noarch	libvorbis	< 1.3.5-r4	UNKNOWN
Alpine	3.18-main	noarch	libvorbis	< 1.3.5-r4	UNKNOWN