Fedora 40 : oggvideotools (2023-9f6281eaf7)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-9f6281eaf7 advisory. Automatic update for oggvideotools-0.9.1-15.fc40. Changelog Sun Aug 27 2023 Zbigniew Jdrzejewski-Szmek - 0.9.1-15 - Add patch for CVE-2020-21724 rhbz2234728...

CVE-2020-21724: Out-of-bounds Write

Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run arbitrary code via opening of crafted ogg file...