high7.5
CVE-2018-10393
bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.
Impact
bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xiph.Org | Libvorbis | Version 1.3.6 |
| Debian | Debian Linux | Versions 8.0, 9.0 |
| Redhat | Enterprise Linux | Version 8.0 |
| Redhat | Enterprise Linux Eus | Versions 8.1, 8.2, 8.4 |
| Redhat | Enterprise Linux Server Aus | Versions 8.2, 8.4 |
| Redhat | Enterprise Linux Server Tus | Versions 8.2, 8.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://access.redhat.com/errata/RHSA-2019:3703
- https://gitlab.xiph.org/xiph/vorbis/issues/2334
- https://lists.debian.org/debian-lts-announce/2019/11/msg00031.html
- https://lists.debian.org/debian-lts-announce/2021/11/msg00023.html
- https://security.gentoo.org/glsa/202003-36
- https://access.redhat.com/errata/RHSA-2019:3703
- https://gitlab.xiph.org/xiph/vorbis/issues/2334
- https://lists.debian.org/debian-lts-announce/2019/11/msg00031.html
- https://lists.debian.org/debian-lts-announce/2021/11/msg00023.html
- https://security.gentoo.org/glsa/202003-36