The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact via a crafted mp4 file.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-libvorbis | Nov 24, 2017 | Sep 21, 2017 | |
| Debian | debian-upgrade-libvorbis | Nov 29, 2019 | Sep 21, 2017 | |
| Freebsd | freebsd-upgrade-package-libvorbis | Jun 29, 2020 | Jun 28, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-media-libs-libvorbis | Mar 17, 2020 | Sep 21, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-libvorbis | Jan 19, 2018 | Sep 21, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-libvorbis | Jan 19, 2018 | Sep 21, 2017 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-libvorbis | Sep 28, 2020 | Sep 21, 2017 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-libvorbis | Aug 10, 2021 | Sep 21, 2017 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-libvorbishuawei-euleros-2_0_sp9-upgrade-libvorbis-help | Aug 10, 2021 | Sep 21, 2017 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-codec-ogg-vorbis-2-30-0-0-175-3-35-0-3-0 | Aug 24, 2018 | Sep 21, 2017 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Sep 21, 2017 | |
| Suse | — | suse-upgrade-libvorbissuse-upgrade-libvorbis-32bitsuse-upgrade-libvorbis-develsuse-upgrade-libvorbis-docsuse-upgrade-libvorbis-x86suse-upgrade-libvorbis0suse-upgrade-libvorbis0-32bitsuse-upgrade-libvorbisenc2suse-upgrade-libvorbisenc2-32bitsuse-upgrade-libvorbisfile3suse-upgrade-libvorbisfile3-32bit | May 17, 2018 | Sep 21, 2017 |
| Ubuntu | ubuntu-pro-upgrade-libvorbis0aubuntu-pro-upgrade-libvorbisenc2ubuntu-pro-upgrade-libvorbisfile3 | May 13, 2022 | Sep 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub