Skip to content
OpenAdvisories
Unscored RHSA-2008:0271 4 CVEs

Red Hat Security Advisory: libvorbis security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 2 enterprise_linux:2.1::as libvorbis 0:1.0rc2-9.el2
Red Hat · RHEL 2 enterprise_linux:2.1::as libvorbis-devel 0:1.0rc2-9.el2
Red Hat · RHEL 2 enterprise_linux:2.1::aw libvorbis 0:1.0rc2-9.el2
Red Hat · RHEL 2 enterprise_linux:2.1::aw libvorbis-devel 0:1.0rc2-9.el2
Red Hat · RHEL 2 enterprise_linux:2.1::es libvorbis 0:1.0rc2-9.el2
Red Hat · RHEL 2 enterprise_linux:2.1::es libvorbis-devel 0:1.0rc2-9.el2
Red Hat · RHEL 2 enterprise_linux:2.1::ws libvorbis 0:1.0rc2-9.el2
Red Hat · RHEL 2 enterprise_linux:2.1::ws libvorbis-devel 0:1.0rc2-9.el2

Vulnerabilities 4

  • Unscored —
    CVE-2008-1419

    Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attack…

    libvorbis libvorbisidec Debian
  • Unscored —
    CVE-2008-1420

    Integer overflow in residue partition value (aka partvals) evaluation in Xiph.org libvorbis 1.2.0 and earlier allows re…

    libvorbis Debian
  • Unscored —
    CVE-2008-1423

    Integer overflow in a certain quantvals and quantlist calculation in Xiph.org libvorbis 1.2.0 and earlier allows remote…

    libvorbis libvorbisidec Debian
  • Unscored —
    CVE-2008-2009

    Xiph.org libvorbis before 1.0 does not properly check for underpopulated Huffman trees, which allows remote attackers t…

    libvorbis libvorbisidec Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=440700
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=440706
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=440709
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=444443
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0271.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-1419
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-1419
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-1419
  • report
    https://access.redhat.com/security/cve/CVE-2008-1420
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-1420
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-1420
  • report
    https://access.redhat.com/security/cve/CVE-2008-1423
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-1423
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-1423
  • report
    https://access.redhat.com/security/cve/CVE-2008-2009
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2009
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2009