Lucene search
Gentoo FoundationMGASA-2023-0316HistoryNov 12, 2023 - 3:44 a.m.
Updated vorbis-tools packages fix a security vulnerability
2023-11-1203:44:53
Gentoo Foundation
advisories.mageia.org
36
vorbis-tools security patch unix
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.8
Confidence
Low
EPSS
0.001
Percentile
30.8%
The upstream patch to fix CVE-2023-43361 was added
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 8 | noarch | vorbis-tools | < 1.4.0-15.1 | vorbis-tools-1.4.0-15.1.mga8 |
| Mageia | 9 | noarch | vorbis-tools | < 1.4.2-3.1 | vorbis-tools-1.4.2-3.1.mga9 |
References
Related
nessus
nessus
RHEL 8 : vorbis-tools (RHSA-2024:3095)
2024-05-23 00:00:00
Fedora 39 : vorbis-tools (2024-faff3dd9d6)
2024-01-26 00:00:00
Oracle Linux 8 : vorbis-tools (ELSA-2024-3095)
2024-05-28 00:00:00
openvas
openvas
Fedora: Security Advisory (FEDORA-2024-faff3dd9d6)
2024-01-27 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:4218-1)
2023-10-27 00:00:00
Fedora: Security Advisory for vorbis-tools (FEDORA-2024-5f8da7c1f1)
2024-01-28 00:00:00
almalinux
almalinux
Moderate: vorbis-tools security update
2024-05-22 00:00:00
veracode
veracode
Denial Of Service (DoS)
2023-11-30 18:44:36
cvelist
cvelist
CVE-2023-43361
2023-10-02 00:00:00
redos
redos
ROS-20240404-20
2024-04-04 00:00:00
prion
prion
Buffer overflow
2023-10-02 21:15:00
redhatcve
redhatcve
CVE-2023-43361
2023-10-05 04:27:14
redhat
redhat
(RHSA-2024:3095) Moderate: vorbis-tools security update
2024-05-22 06:35:35
nvd
nvd
CVE-2023-43361
2023-10-02 21:15:34
osv
osv
Moderate: vorbis-tools security update
2024-05-22 00:00:00
CVE-2023-43361
2023-10-02 21:15:34
vorbis-tools-1.4.2-2.1 on GA media
2024-06-15 00:00:00
ubuntucve
ubuntucve
CVE-2023-43361
2023-10-02 00:00:00
oraclelinux
oraclelinux
vorbis-tools security update
2024-05-23 00:00:00
debiancve
debiancve
CVE-2023-43361
2023-10-02 21:15:34
alpinelinux
alpinelinux
CVE-2023-43361
2023-10-02 21:15:34
fedora
fedora
[SECURITY] Fedora 39 Update: vorbis-tools-1.4.2-10.fc39
2024-01-27 01:30:40
[SECURITY] Fedora 38 Update: vorbis-tools-1.4.2-9.fc38
2024-01-27 02:12:57
freebsd
freebsd
vorbistools -- heap buffer overflow in oggenc
2023-09-16 00:00:00
cve
cve
CVE-2023-43361
2023-10-02 21:15:34
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.8
Confidence
Low
EPSS
0.001
Percentile
30.8%
Related for MGASA-2023-0316