Lucene search

K
freebsdFreeBSDA35F415D-572A-11E5-B0A4-F8B156B6DCC8
HistoryAug 08, 2015 - 12:00 a.m.

vorbis-tools, opus-tools -- multiple vulnerabilities

2015-08-0800:00:00
vuxml.freebsd.org
14

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.038 Low

EPSS

Percentile

91.9%

Paris Zoumpouloglou reports:

I discovered an integer overflow issue in oggenc,
related to the number of channels in the input WAV file.
The issue triggers an out-of-bounds memory access which
causes oggenc to crash.

Paris Zoumpouloglou reports:

A crafted WAV file with number of channels set to 0
will cause oggenc to crash due to a division by zero
issue.

pengsu reports:

I discovered an buffer overflow issue in oggenc/audio.c
when it tries to open invalid aiff file.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchvorbis-tools< 1.4.0_10,3UNKNOWN
FreeBSDanynoarchopus-tools< 0.1.9_2UNKNOWN

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.038 Low

EPSS

Percentile

91.9%