Lucene search
K

226 matches found

OSV
OSV
added 2023/10/02 9:15 p.m.1 views

AZL-31037 CVE-2023-43361 affecting package vorbis-tools 1.4.2-6

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...

7.8CVSS7.5AI score0.00028EPSS
Exploits1References1
OSV
OSV
added 2023/10/02 9:15 p.m.1 views

AZL-37055 CVE-2023-43361 affecting package vorbis-tools 1.4.2-6

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...

7.8CVSS7.5AI score0.00028EPSS
Exploits1References1
NVD
NVD
added 2023/10/02 9:15 p.m.17 views

CVE-2023-43361

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...

7.8CVSS7.7AI score0.00028EPSS
Exploits1References8
OSV
OSV
added 2023/10/02 9:15 p.m.1 views

DEBIAN-CVE-2023-43361

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...

7.8CVSS7.9AI score0.00028EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2023/10/02 9:15 p.m.13 views

CVE-2023-43361

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...

7.8CVSS7.4AI score0.00028EPSS
Exploits1References5
Prion
Prion
added 2023/10/02 9:15 p.m.16 views

Buffer overflow

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...

4.4CVSS7.7AI score0.00028EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2023/10/02 9:15 p.m.0 views

UBUNTU-CVE-2023-43361

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...

7.8CVSS6.2AI score0.00028EPSS
Exploits1References6
Cvelist
Cvelist
added 2023/10/02 12:0 a.m.15 views

CVE-2023-43361

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...

8AI score0.00028EPSS
Exploits1References6
CVE
CVE
added 2023/10/02 12:0 a.m.83 views

CVE-2023-43361

CVE-2023-43361 is a buffer‑overflow vulnerability in Vorbis-tools 1.4.2 that allows a local attacker to execute arbitrary code and cause a denial of service during wav→ogg conversions. Connected advisories confirm that patches/remediations exist across multiple distributions (e.g., Fedora updates...

7.8CVSS7.7AI score0.00028EPSS
Exploits1References8Affected Software1
AlpineLinux
AlpineLinux
added 2023/10/02 12:0 a.m.20 views

CVE-2023-43361

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...

7.8CVSS7.7AI score0.00028EPSS
Exploits1
CNNVD
CNNVD
added 2023/10/02 12:0 a.m.1 views

Vorbis-tools Buffer Error Vulnerability

vorbis-tools is an open source command line tool from the Xiph.Org Foundation for creating and playing Ogg Vorbis files. A buffer error vulnerability exists in Vorbis-tools version v.1.4.2, which stems from the presence of a buffer overflow vulnerability. An attacker could use this vulnerability ...

7.8CVSS8AI score0.00028EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2023/10/02 12:0 a.m.2 views

PT-2023-8921 · Unknown +7 · Vorbis-Tools +7

Name of the Vulnerable Software and Affected Versions: Vorbis-tools version 1.4.2 Description: The issue is related to a Buffer Overflow vulnerability that allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files. This occurs...

7.8CVSS7.8AI score0.00028EPSS
Exploits1References47
FreeBSD
FreeBSD
added 2023/09/16 12:0 a.m.22 views

vorbistools -- heap buffer overflow in oggenc

Frank-Z7 reports: Heap buffer overflow when vorbis-tools/oggenc converts WAV files to Ogg files...

7.8CVSS7.4AI score0.00028EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.21 views

Debian: Security Advisory (DLA-317-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS5.5AI score0.0197EPSS
Exploits3References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:24 a.m.1 views

SUSE CVE-2014-9639

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service crash via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access...

5CVSS7AI score0.01165EPSS
Exploits1References7
SUSE CVE
SUSE CVE
added 2023/02/15 5:24 a.m.1 views

SUSE CVE-2014-9638

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

5CVSS6.8AI score0.01096EPSS
Exploits1References6
SUSE CVE
SUSE CVE
added 2023/02/15 5:24 a.m.1 views

SUSE CVE-2014-9640

oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service out-of-bounds read via a crafted raw file...

5CVSS6.7AI score0.01096EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 5:14 a.m.1 views

SUSE CVE-2015-6749

Buffer overflow in the aiffopen function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to cause a denial of service crash via a crafted AIFF file...

4.3CVSS7AI score0.0197EPSS
Exploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:43 a.m.2 views

SUSE CVE-2017-11331

The wavopen function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service memory allocation error via a crafted wav file...

5.5CVSS6.7AI score0.01685EPSS
Exploits3References3
CBLMariner
CBLMariner
added 2023/02/14 10:19 p.m.18 views

CVE-2014-9639 affecting package vorbis-tools for versions less than 1.4.0-35

CVE-2014-9639 affecting package vorbis-tools for versions less than 1.4.0-35. A patched version of the package is available...

5CVSS5.5AI score0.01165EPSS
Exploits1
Rows per page
Query Builder