Red Hat Security AdvisoryRHSA-2019:3703
libvorbis security update
Released 2019-11-05 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) libvorbis-devel-1:1.3.6-2.el8, libvorbis-devel-docs-1:1.3.6-2.el8
- Red Hat Enterprise Linux AppStream (v. 8) libvorbis-1:1.3.6-2.el8
Fixes 2 records
Priority MEDIUM 44
mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have u…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.03321 · Published 2018-04-26 · Partial fix CWE-125
Priority LOW 37
bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0232 · Published 2018-04-26 · Partial fix CWE-125
