Lucene search
+L

738 matches found

BDU FSTEC
BDU FSTEC
added 2020/07/15 12:0 a.m.4 views

The vulnerability of the mapping0_forward function in the multimedia library libvorbis allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the mapping0forward function in the multimedia library libvorbis is related to the issue of operations occurring outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code...

10CVSS7.1AI score0.03343EPSS
Exploits1References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/07/15 12:0 a.m.4 views

The vulnerability of the bark_noise_hybridmp function in the multimedia library libvorbis, which allows a intruder to cause a service failure

The vulnerability of the barknoisehybridmp function in the multimedia library libvorbis arises from an operation that occurs outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

7.8CVSS6.8AI score0.024EPSS
Exploits0References10Affected Software6
Tenable Nessus
Tenable Nessus
added 2020/07/06 12:0 a.m.29 views

Slackware 14.0 / 14.1 / 14.2 / current : libvorbis (SSA:2020-186-01)

New libvorbis packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2020-186-01. The text itself is copyright C Slackware...

8.8CVSS6.3AI score0.04575EPSS
Exploits0References3
Slackware Linux
Slackware Linux
added 2020/07/04 7:17 p.m.32 views

[slackware-security] libvorbis

New libvorbis packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libvorbis-1.3.7-i586-1slack14.2.txz: Upgraded. Fix out-of-bounds read encoding very low sample rates. For more...

8.8CVSS0.6AI score0.04575EPSS
Exploits0
OpenVAS
OpenVAS
added 2020/07/03 12:0 a.m.24 views

Huawei EulerOS: Security Advisory for libvorbis (EulerOS-SA-2020-1772)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.6AI score0.05705EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2020/07/01 12:0 a.m.27 views

EulerOS Virtualization 3.0.6.0 : libvorbis (EulerOS-SA-2020-1772)

According to the versions of the libvorbis package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An invalid free flaw was found in the way libvorbis handled processing of Ogg Vorbis format files. This flaw could potentially ...

9.8CVSS6.4AI score0.05705EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2020/06/29 12:0 a.m.23 views

FreeBSD : libvorbis -- two vulnerabilities (4200d5f5-b985-11ea-b08a-f8b156b6dcc8)

Two vulnerabilities were fixed in the upstream repository : - The barknoisehybridmp function allows remote attackers to cause a denial of service out-of-bounds access and application crash or possibly have unspecified other impact via a crafted file. - mapping0forward does not validate the number...

8.8CVSS6.7AI score0.04575EPSS
Exploits1References5
Veracode
Veracode
added 2020/05/10 11:25 p.m.34 views

Remote Code Execution

libvorbis is vulnerable to remote code execution. The vulnerability exists when freeing uninitialized memory in the function vorbisanalysisheaderout in info.c when vi-channels=0, a similar issue to Mozilla bug 550184...

9.8CVSS4.8AI score0.05705EPSS
Exploits0References4Affected Software1
Veracode
Veracode
added 2020/04/10 12:42 a.m.37 views

Arbitrary Code Execution

libvorbis is vulnerable to arbitrary code execution. Multiple flaws were found in the libvorbis library. A specially-crafted Ogg Vorbis media format file Ogg could cause an application using libvorbis to crash or, possibly, execute arbitrary code when opened...

10CVSS3.9AI score0.05372EPSS
Exploits1References19Affected Software1
Veracode
Veracode
added 2020/04/10 12:35 a.m.21 views

Arbitrary Code Execution

libvorbis is vulnerable to arbitrary code execution. An insufficient input validation flaw was found in the way libvorbis processes the codec file headers static mode headers and encoding books of the Ogg Vorbis audio file format Ogg. A remote attacker could provide a specially-crafted Ogg file...

9.3CVSS6.3AI score0.02715EPSS
Exploits0References21Affected Software1
Veracode
Veracode
added 2020/04/10 12:23 a.m.28 views

Denial Of Service (DoS)

liborbis is vulnerable to denial of service DoS. The vulnerability exists as an attacker could create a carefully crafted OGG audio file in such a way that it could cause an application linked with libvorbis to crash, or execute arbitrary code when it was opened...

4.3CVSS4.8AI score0.04254EPSS
Exploits2References27Affected Software1
Veracode
Veracode
added 2020/04/10 12:23 a.m.27 views

Denial Of Service (DoS)

libvorbis is vulneralbe to denial of service. An attacker could create a malicious OGG audio file in such a way that it could cause an application linked with libvorbis to crash, or execute arbitrary code when it was opened...

4.3CVSS4.9AI score0.03512EPSS
Exploits0References9Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/03/18 12:0 a.m.28 views

GLSA-202003-36 : libvorbis: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202003-36 libvorbis: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libvorbis. Please review the CVE identifiers referenced below for details. Impact : A remote attacker, by enticing the user to process ...

8.8CVSS6.5AI score0.04575EPSS
Exploits1References4
Gentoo Linux
Gentoo Linux
added 2020/03/16 12:0 a.m.70 views

libvorbis: Multiple vulnerabilities

Background libvorbis is the reference implementation of the Xiph.org Ogg Vorbis audio file format. It is used by many applications for playback of Ogg Vorbis files. Description Multiple vulnerabilities have been discovered in libvorbis. Please review the CVE identifiers referenced below for...

8.8CVSS3AI score0.04575EPSS
Exploits1
OpenVAS
OpenVAS
added 2020/03/13 12:0 a.m.55 views

Huawei EulerOS: Security Advisory for libvorbis (EulerOS-SA-2020-1247)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.6AI score0.05705EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2020/03/13 12:0 a.m.27 views

EulerOS Virtualization for ARM 64 3.0.2.0 : libvorbis (EulerOS-SA-2020-1247)

According to the versions of the libvorbis package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An invalid free flaw was found in the way libvorbis handled processing of Ogg Vorbis format files. This flaw could...

9.8CVSS6.3AI score0.05705EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.23 views

Huawei EulerOS: Security Advisory for libvorbis (EulerOS-SA-2019-2345)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.4AI score0.04575EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.20 views

Huawei EulerOS: Security Advisory for libvorbis (EulerOS-SA-2018-1155)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.1AI score0.12054EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.46 views

Huawei EulerOS: Security Advisory for libvorbis (EulerOS-SA-2018-1104)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.1AI score0.12054EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.35 views

Huawei EulerOS: Security Advisory for libvorbis (EulerOS-SA-2018-1105)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.1AI score0.12054EPSS
Exploits0References2
Rows per page
Query Builder