Low ELSA-2019-3703 2 CVEs

Low: libvorbis security update (Oracle Linux 8)

Published Nov 14, 2019 · Updated Nov 14, 2019

Ecosystem: Oracle Linux

Summary

[1.3.6-2]
- Sync with git for CVE-2017-14160, CVE-2018-10392, CVE-2018-10393

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 8	libvorbis	1:1.3.6-2.el8
Oracle Linux · 8	libvorbis-devel	1:1.3.6-2.el8
Oracle Linux · 8	libvorbis-devel-docs	1:1.3.6-2.el8

Vulnerabilities 2

Unscored —

CVE-2018-10392

mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remot…

libvorbis libvorbis libvorbis libvorbis Debian Ubuntu Azure Linux Alpine

Apr 26, 2018
Unscored —

CVE-2018-10393

bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.

libvorbis libvorbis libvorbis libvorbis Debian Ubuntu Azure Linux Alpine

Apr 26, 2018