vulnerability
Rocky Linux: CVE-2023-43361: vorbis-tools (RLSA-2024-3095)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:M/Au:N/C:C/I:C/A:C) | Oct 2, 2023 | May 8, 2025 | Mar 31, 2026 |
Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
Oct 2, 2023
Added
May 8, 2025
Modified
Mar 31, 2026
Description
Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files.
Solutions
rocky-upgrade-vorbis-toolsrocky-upgrade-vorbis-tools-debuginforocky-upgrade-vorbis-tools-debugsource
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.