258 matches found
RHEL 6 : vorbis-tools (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - vorbis-tools: Invalid memory allocation in wavopen function in oggenc/audio.c CVE-2017-11331 -...
RHEL 5 : vorbis-tools (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - vorbis-tools: Invalid memory allocation in wavopen function in oggenc/audio.c CVE-2017-11331 Note that Nessus has n...
The vulnerability of the Vorbis-tools package, related to the ability to write beyond the buffer boundaries in memory, allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the Vorbis-tools package lies in its ability to write beyond the buffer boundaries in memory during the conversion of WAV files into OGG files. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code...
ROS-20240404-20
A vulnerability in the Vorbis-tools package is related to the conversion of wav files to ogg files. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
Fedora: Security Advisory for vorbis-tools (FEDORA-2024-5f8da7c1f1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 38 Update: vorbis-tools-1.4.2-9.fc38
Ogg Vorbis is a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed audio format for audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. The vorbis package contains an encoder, a decoder, a playback tool, and a comment editor...
[SECURITY] Fedora 39 Update: vorbis-tools-1.4.2-10.fc39
Ogg Vorbis is a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed audio format for audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. The vorbis package contains an encoder, a decoder, a playback tool, and a comment editor...
Fedora: Security Advisory (FEDORA-2024-faff3dd9d6)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 38 : vorbis-tools (2024-5f8da7c1f1)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-5f8da7c1f1 advisory. Security fix for CVE-2023-43361 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...
Fedora 39 : vorbis-tools (2024-faff3dd9d6)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-faff3dd9d6 advisory. Security fix for CVE-2023-43361 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...
Denial Of Service (DoS)
vorbis-tools is vulnerable to Denial Of Service DoS. The vulnerability exists due to the buffer overflow in the library, which allows an attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...
Mageia: Security Advisory (MGASA-2023-0316)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated vorbis-tools packages fix a security vulnerability
The upstream patch to fix CVE-2023-43361 was added...
MGASA-2023-0316 Updated vorbis-tools packages fix a security vulnerability
The upstream patch to fix CVE-2023-43361 was added...
Amazon Linux 2023 : vorbis-tools (ALAS2023-2023-414)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-414 advisory. Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files. CVE-2023-43361...
Low: vorbis-tools
Issue Overview: Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files. CVE-2023-43361 Affected Packages: vorbis-tools Issue Correction: Run dnf update vorbis-tools...
SUSE: Security Advisory (SUSE-SU-2023:4251-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2023:4251-1 Security update for vorbis-tools
This update for vorbis-tools fixes the following issues: - CVE-2023-43361: Fixed a buffer overflow vulnerability during the conversion of wav files to ogg files. bsc1215942...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : vorbis-tools (SUSE-SU-2023:4251-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4251-1 advisory. - CVE-2023-43361: Fixed a buffer overflow vulnerability during the conversion of wav files to ogg files...
SUSE: Security Advisory (SUSE-SU-2023:4218-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...