CVE-2023-43361

概要

参考情報

• xiph/vorbis · Not Applicable
• xiph/vorbis-tools · Product
• xiph/vorbis-tools · Exploit
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GJKTWQXOZDMCXVEFCQZVH3F3FQYMNYLI
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T47YXGRUCUKN7WEOHUEIUNJ2KZ2C2IDN
• xiph.org/vorbis · Vendor Advisory
• lists.fedoraproject.org/archives/list/[email protected]/message/GJKTWQXOZDMCXVEFCQZVH3F3FQYMNYLI
• lists.fedoraproject.org/archives/list/[email protected]/message/T47YXGRUCUKN7WEOHUEIUNJ2KZ2C2IDN

vorbis-tools のその他の脆弱性

• CVE-2017-11331中 5.5The wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (memory allocati…
• CVE-2015-6749中 4.3Buffer overflow in the aiff_open function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to cause a denial of s…
• CVE-2014-9640中 5.0oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted raw file.
• CVE-2014-9639中 5.0Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (crash) via a crafted number of channe…
• CVE-2014-9638中 5.0oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the n…