CVE-2018-10393

Description

References

• access.redhat.com/errata/RHSA-2019:3703 · Third Party Advisory
• gitlab.xiph.org/xiph/vorbis/issues/2334 · Issue Tracking
• lists.debian.org/debian-lts-announce/2019/11/msg00031.html · Mailing List
• lists.debian.org/debian-lts-announce/2021/11/msg00023.html · Mailing List
• security.gentoo.org/glsa/202003-36 · Third Party Advisory

libvorbis의 다른 취약점

• CVE-2020-20412보통 6.5lib/codebook.c in libvorbis before 1.3.6, as used in StepMania 5.0.12 and other products, has insufficient array bounds checking via a craft…
• CVE-2018-10392높음 8.8mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause …
• CVE-2017-14160높음 8.8The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (out-of-bounds ac…
• CVE-2017-14633보통 6.5In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may le…
• CVE-2017-14632심각 9.8Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.…