Lucene search
+L

1682 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/01 12:00 a.m.•4 views

CVE-2024-33428: Heap-based Buffer Overflow

Buffer-Overflow vulnerability at conv.c:68 of stsaz phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file...

8.8CVSS6.6AI score0.0116EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/01 12:00 a.m.•6 views

CVE-2024-33429: Heap-based Buffer Overflow

Buffer-Overflow vulnerability at pcmconvert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via a crafted .wav file...

7.1CVSS6.6AI score0.01098EPSS
SaveExploits1References1
AlmaLinux
AlmaLinux
•added 2024/04/30 12:00 a.m.•49 views

Moderate: libsndfile security update

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fixes: libsndfile: integer overflow in src/mat4.c and src/au.c leads to DoS CVE-2022-33065 For more details about the security issues, including the impact, a CVSS score,...

7.8CVSS7AI score0.00364EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/04/11 10:53 a.m.•28 views

CVE-2024-20794 Adobe Animate 2024 WAV File Parsing Null Pointer Dereference

Animate versions 23.0.4, 24.0.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service. An attacker could leverage this vulnerability to cause a system crash, resulting in a denial of service. Exploitation of this issue requires us...

5.5CVSS6AI score0.00253EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/11 10:53 a.m.•22 views

CVE-2024-20794 Adobe Animate 2024 WAV File Parsing Null Pointer Dereference

Animate versions 23.0.4, 24.0.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service. An attacker could leverage this vulnerability to cause a system crash, resulting in a denial of service. Exploitation of this issue requires us...

5.5CVSS6.3AI score0.00253EPSS
SaveExploits0References1
Redos
Redos
•added 2024/04/04 12:00 a.m.•28 views

ROS-20240404-20

A vulnerability in the Vorbis-tools package is related to the conversion of wav files to ogg files. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

7.8CVSS6.7AI score0.00441EPSS
SaveExploits1
Amazon
Amazon
•added 2024/03/21 12:00 a.m.•22 views

Medium: libsndfile

Issue Overview: An off-by-one error in function wavreadheader in src/wav.c in Libsndfile 1.1.0, results in a write out of bound, which allows an attacker to execute arbitrary code, Denial of Service or other unspecified impacts. CVE-2022-33064 Affected Packages: libsndfile Issue Correction: Run d...

7.8CVSS7.4AI score0.00338EPSS
SaveExploits1
OSV
OSV
•added 2023/12/15 11:06 a.m.•11 views

OESA-2023-1931 sox security update

SoX is a cross-platform Windows, Linux, MacOS X, etc. command line utility that can convert various formats of computer audio files in to other formats. It can also apply various effects to these sound files, and, as an added bonus, SoX can play and record audio files on most platforms. Security...

7.8CVSS7.5AI score0.00481EPSS
SaveExploits5References9
Veracode
Veracode
•added 2023/11/30 6:44 p.m.•25 views

Denial Of Service (DoS)

vorbis-tools is vulnerable to Denial Of Service DoS. The vulnerability exists due to the buffer overflow in the library, which allows an attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...

7.8CVSS8AI score0.00441EPSS
SaveExploits1References8Affected Software1
Tenable Nessus
Tenable Nessus
•added 2023/10/27 12:00 a.m.•21 views

SUSE SLES12 Security Update : vorbis-tools (SUSE-SU-2023:4218-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4218-1 advisory. - CVE-2023-43361: Fixed a buffer overflow vulnerability during the conversion of wav files to ogg files. bsc1215942 Tenable has extracted th...

7.8CVSS7.4AI score0.00441EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2023/10/17 12:00 a.m.•20 views

The vulnerability of the ICMPv6 network protocol implementation in Junos QFX5K routers allows a attacker to cause a service failure.

The vulnerability of the ICMPv6 network protocol implementation in Junos QFX5K routers lies in the execution of a loop with an unavailable exit condition when processing WAV/AVI format files. Exploiting this vulnerability allows a remote attacker to cause service failures...

7.8CVSS7.4AI score0.00629EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
•added 2023/10/05 4:27 a.m.•40 views

CVE-2023-43361

A buffer overflow vulnerability was found in vorbis-tools. This flaw allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of WAV files to OGG files. Mitigation Mitigation for this issue is either not available or the currently available options do...

7.3CVSS7.8AI score0.00441EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2023/10/05 1:52 a.m.•8 views

SUSE CVE-2023-43361

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...

7.3CVSS7.6AI score0.00441EPSS
SaveExploits1References9
OSV
OSV
•added 2023/10/02 9:15 p.m.•7 views

DEBIAN-CVE-2023-43361

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...

7.8CVSS7.9AI score0.00441EPSS
SaveExploits1References1
OSV
OSV
•added 2023/10/02 9:15 p.m.•16 views

AZL-31037 CVE-2023-43361 affecting package vorbis-tools 1.4.2-6

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...

7.8CVSS7.5AI score0.00441EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2023/10/02 9:15 p.m.•21 views

CVE-2023-43361

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...

7.8CVSS7.4AI score0.00441EPSS
SaveExploits1References5
OSV
OSV
•added 2023/10/02 9:15 p.m.•10 views

UBUNTU-CVE-2023-43361

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...

7.8CVSS6.2AI score0.00441EPSS
SaveExploits1References6
Mend
Mend
•added 2023/10/02 12:00 a.m.•1 views

CVE-2023-43361

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...

8.5CVSS0.00441EPSS
SaveExploits1References11
Cvelist
Cvelist
•added 2023/10/02 12:00 a.m.•31 views

CVE-2023-43361

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...

8AI score0.00441EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2023/10/02 12:00 a.m.•8 views

PT-2023-8921

Name of the Vulnerable Software and Affected Versions Vorbis-tools version 1.4.2 Description The issue is related to a Buffer Overflow vulnerability that allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files. This occurs du...

7.8CVSS7.8AI score0.00441EPSS
SaveExploits1References46
Rows per page
Query Builder