bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libvorbis-devel-docsUpgrade libvorbisUpgrade libvorbis-devel | May 4, 2022 | Apr 26, 2018 |
| Alpine Linux | — | Upgrade libvorbis | Mar 26, 2024 | Apr 26, 2018 |
| Centos_linux | — | Upgrade libvorbisUpgrade libvorbis-debugsourceUpgrade libvorbis-debuginfo | Nov 6, 2019 | Apr 26, 2018 |
| Debian | — | Upgrade libvorbis | Nov 29, 2019 | Apr 26, 2018 |
| Gentoo Linux | — | Upgrade media-libs/libvorbis. | Mar 17, 2020 | Apr 26, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libvorbis | Nov 3, 2020 | Apr 26, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libvorbis | Sep 3, 2020 | Apr 26, 2018 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libvorbis-helpUpgrade libvorbis | Aug 10, 2021 | Apr 26, 2018 |
| Oracle Solaris | — | Upgrade codec/ogg-vorbis to version 2.30.0-0.175.3.35.0.3.0 on Solaris 11.3 | Aug 24, 2018 | Apr 26, 2018 |
| Oracle_linux | — | Upgrade libvorbisUpgrade libvorbis-develUpgrade libvorbis-devel-docs | Oct 5, 2022 | Apr 25, 2018 |
| Redhat_linux | — | No solution existsUpgrade libvorbisUpgrade libvorbis-debugsourceUpgrade libvorbis-devel-docsUpgrade libvorbis-debuginfoUpgrade libvorbis-devel | Nov 6, 2019 | Apr 26, 2018 |
| Rocky_linux | — | Upgrade libvorbisUpgrade libvorbis-develUpgrade libvorbis-debugsourceUpgrade libvorbis-debuginfo | Mar 12, 2024 | Apr 26, 2018 |
| Suse | — | Upgrade libvorbisenc2-32bitUpgrade libvorbisUpgrade libvorbisfile3-32bitUpgrade libvorbis-docUpgrade libvorbisenc2Upgrade libvorbis0Upgrade libvorbis0-32bitUpgrade libvorbis-32bitUpgrade libvorbis-x86Upgrade libvorbis-develUpgrade libvorbisfile3 | May 17, 2018 | Apr 26, 2018 |
| Ubuntu | — | Upgrade libvorbisenc2 (Ubuntu Pro)Upgrade libvorbisfile3 (Ubuntu Pro)Upgrade libvorbis0a (Ubuntu Pro) | May 13, 2022 | Apr 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub