CVE-2018-10392

mapping0forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service heap-based buffer overflow or over-read or possibly have unspecified other impact via a crafted file...

CVE-2018-10393

barknoisehybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read...

CVE-2018-10393

CVE-2018-10393 affects libvorbis 1.3.6: bark_noise_hybridmp in psy.c causes a stack-based buffer over-read. Affected software is the libvorbis library (Xiph.org) and downstream packages (Debian/AlmaLinux/Gentoo advisories reference libvorbis ≤1.3.6). Impact is memory-safe violation potential; in ...

CVE-2018-10392

CVE-2018-10392 affects Xiph.Org libvorbis 1.3.6 where mapping0_forward in mapping0.c does not validate the number of channels, allowing a remote attacker to cause denial of service via a crafted file (heap-based overflow or over-read). The issue is fixed in later libvorbis releases (mitigation ty...

CVE-2018-10393

barknoisehybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read...

CVE-2018-10393

barknoisehybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read...

CVE-2018-10392

mapping0forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service heap-based buffer overflow or over-read or possibly have unspecified other impact via a crafted file...

Xiph.Org libvorbis 'bark_noise_hybridmp' function stack buffer out-of-bounds read vulnerability

Xiph.Org libvorbis is an open source library of audio encoding and decoding functions for medium to high quality audio at fixed or variable bit rates. A stack buffer out-of-bounds read vulnerability exists in the 'barknoisehybridmp' function of the psy.c file in Xiph.Org libvorbis version 1.3.6. ...

libvorbis Denial of Service Vulnerability (CNVD-2018-08909)

Xiph.Org libvorbis is an open source library of audio encoding and decoding functions for medium to high quality audio at fixed or variable bit rates. A heap-based buffer overflow vulnerability exists in the 'mapping0forward' function of the mapping0.c file in version 1.3.6 of Xiph.Org libvorbis,...

Denial Of Service (DoS) Through Out-of-Bounds Write

libvorbis.so is vulnerable to out-of-bounds write. A malicious user can pass a audio file that when processed causes a out-of-bounds write that can lead to arbitrary code execution or to the application crashing...

Oracle Linux 7 : libvorbis (ELSA-2018-1058)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1058 advisory. 1.3.3-8.1 - Backport fix for CVE-2018-5146 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Amazon Linux 2 : libvorbis (ALAS-2018-981)

Vorbis audio processing out of bounds write MFSA 2018-08 : An out of bounds write flaw was found in the processing of vorbis audio data. A maliciously crafted file or audio stream could cause the application to crash or, potentially, execute arbitrary code. CVE-2018-5146 C Tenable Network Securit...

RHEL 7 : libvorbis (RHSA-2018:1058)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1058 advisory. The libvorbis package contains runtime libraries for use in programs that support Ogg Vorbis, a fully open, non-proprietary, patent- and royalty-free...

Important: Red Hat Security Advisory: libvorbis security update

An update for libvorbis is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CentOS Update for libvorbis CESA-2018:0649 centos6

Check the version of libvorbis SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882866";...

CentOS 6 : libvorbis (CESA-2018:0649)

An update for libvorbis is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

OracleVM 3.4 : libvorbis (OVMSA-2018-0030)

The remote OracleVM system is missing necessary patches to address critical security updates : - Backport fix for CVE-2018-5146 - fix CVE-2012-0444 787077 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2018-0030...

OracleVM 3.3 : libvorbis (OVMSA-2018-0031)

The remote OracleVM system is missing necessary patches to address critical security updates : - Backport fix for CVE-2018-5146 - fix CVE-2012-0444 787077 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2018-0031...

Scientific Linux Security Update : libvorbis on SL6.x i386/x86_64 (20180405)

Security Fixes : - Mozilla: Vorbis audio processing out of bounds write MFSA 2018-08 CVE-2018-5146 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid108870; scriptversion"1.8";...

Amazon Linux AMI : libvorbis (ALAS-2018-981)

Vorbis audio processing out of bounds write : An out of bounds write flaw was found in the processing of vorbis audio data. A maliciously crafted file or audio stream could cause the application to crash or, potentially, execute arbitrary code. CVE-2018-5146 C Tenable Network Security, Inc. The...