CVE-2023-43361

CVE-2023-43361 is a buffer‑overflow vulnerability in Vorbis-tools 1.4.2 that allows a local attacker to execute arbitrary code and cause a denial of service during wav→ogg conversions. Connected advisories confirm that patches/remediations exist across multiple distributions (e.g., Fedora updates...

Vorbis-tools Buffer Error Vulnerability

vorbis-tools is an open source command line tool from the Xiph.Org Foundation for creating and playing Ogg Vorbis files. A buffer error vulnerability exists in Vorbis-tools version v.1.4.2, which stems from the presence of a buffer overflow vulnerability. An attacker could use this vulnerability ...

CVE-2023-43361

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...

CVE-2023-43361

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...

CVE-2023-43361

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...

vorbistools -- heap buffer overflow in oggenc

Frank-Z7 reports: Heap buffer overflow when vorbis-tools/oggenc converts WAV files to Ogg files...

Debian: Security Advisory (DLA-317-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2014-9639

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service crash via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access...

SUSE CVE-2014-9638

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

SUSE CVE-2014-9640

oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service out-of-bounds read via a crafted raw file...

SUSE CVE-2015-6749

Buffer overflow in the aiffopen function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to cause a denial of service crash via a crafted AIFF file...

SUSE CVE-2017-11331

The wavopen function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service memory allocation error via a crafted wav file...

CVE-2014-9639 affecting package vorbis-tools for versions less than 1.4.0-35

CVE-2014-9639 affecting package vorbis-tools for versions less than 1.4.0-35. A patched version of the package is available...

CVE-2015-6749 affecting package vorbis-tools for versions less than 1.4.0-35

CVE-2015-6749 affecting package vorbis-tools for versions less than 1.4.0-35. A patched version of the package is available...

CVE-2014-9638 affecting package vorbis-tools for versions less than 1.4.0-35

CVE-2014-9638 affecting package vorbis-tools for versions less than 1.4.0-35. A patched version of the package is available...

CVE-2014-9639 affecting package vorbis-tools for versions less than 1.4.0-35

CVE-2014-9639 affecting package vorbis-tools for versions less than 1.4.0-35. A patched version of the package is available...

CVE-2015-6749 affecting package vorbis-tools for versions less than 1.4.0-35

CVE-2015-6749 affecting package vorbis-tools for versions less than 1.4.0-35. A patched version of the package is available...

CVE-2014-9638 affecting package vorbis-tools for versions less than 1.4.0-35

CVE-2014-9638 affecting package vorbis-tools for versions less than 1.4.0-35. A patched version of the package is available...

Mageia: Security Advisory (MGASA-2015-0051)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2015-0094)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...