SUSE CVE-2014-9638

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

SUSE CVE-2014-9639

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service crash via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access...

SUSE CVE-2014-9640

oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service out-of-bounds read via a crafted raw file...

SUSE CVE-2015-6749

Buffer overflow in the aiffopen function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to cause a denial of service crash via a crafted AIFF file...

SUSE CVE-2017-11331

The wavopen function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service memory allocation error via a crafted wav file...

CVE-2014-9639 affecting package vorbis-tools for versions less than 1.4.0-35

CVE-2014-9639 affecting package vorbis-tools for versions less than 1.4.0-35. A patched version of the package is available...

CVE-2014-9638 affecting package vorbis-tools for versions less than 1.4.0-35

CVE-2014-9638 affecting package vorbis-tools for versions less than 1.4.0-35. A patched version of the package is available...

CVE-2015-6749 affecting package vorbis-tools for versions less than 1.4.0-35

CVE-2015-6749 affecting package vorbis-tools for versions less than 1.4.0-35. A patched version of the package is available...

CVE-2014-9638 affecting package vorbis-tools for versions less than 1.4.0-35

CVE-2014-9638 affecting package vorbis-tools for versions less than 1.4.0-35. A patched version of the package is available...

CVE-2015-6749 affecting package vorbis-tools for versions less than 1.4.0-35

CVE-2015-6749 affecting package vorbis-tools for versions less than 1.4.0-35. A patched version of the package is available...

CVE-2014-9639 affecting package vorbis-tools for versions less than 1.4.0-35

CVE-2014-9639 affecting package vorbis-tools for versions less than 1.4.0-35. A patched version of the package is available...

Mageia: Security Advisory (MGASA-2015-0051)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2015-0094)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the number of channels set to zero.

...

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (crash) via a crafted number of channels in a WAV file which triggers an out-of-bounds memory access.

...

Buffer overflow in the aiff_open function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted AIFF file.

...

Advisory ROSA-SA-2021-1994

Software: vorbis-tools 1.4.0 OS: Cobalt 7.9 CVE-ID: CVE-2014-9638 CVE-Crit: MEDIUM CVE-DESC: oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service division-by-zero error and crash via a WAV file with the number of channels set to zero. CVE-STATUS: default CVE-REV:...

SUSE: Security Advisory (SUSE-SU-2015:0367-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2015:1765-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2015:1014-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...