Summary
Richard Zhu discovered that libvorbis incorrectly handled certain sound
files. An attacker could use this to cause libvorbis to crash, resulting in
a denial or service, or possibly execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libvorbis | 1.3.2-1.3ubuntu1.2 |
| Ubuntu · 16.04 LTS 16.04:LTS | libvorbis | 1.3.5-3ubuntu0.2 |
Vulnerabilities 1
-
Unscored —
An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnera…
References
-
report
https://ubuntu.com/security/CVE-2018-5146