Lucene search

K
ubuntucveUbuntu.comUB:CVE-2017-14632
HistorySep 21, 2017 - 12:00 a.m.

CVE-2017-14632

2017-09-2100:00:00
ubuntu.com
ubuntu.com
9

0.036 Low

EPSS

Percentile

91.7%

Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing
uninitialized memory in the function vorbis_analysis_headerout() in info.c
when vi->channels<=0, a similar issue to Mozilla bug 550184.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu17.10noarchlibvorbis< 1.3.5-4ubuntu0.1UNKNOWN
ubuntu14.04noarchlibvorbis< 1.3.2-1.3ubuntu1.1UNKNOWN
ubuntu16.04noarchlibvorbis< 1.3.5-3ubuntu0.1UNKNOWN