CVE-2014-9640 oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted raw file.
MediumCVSS 5.0
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted raw file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/vorbis-tools(Debian:12) | < 1.4.0-6 | 1.4.0-6 |
| debian/vorbis-tools(Debian:13) | < 1.4.0-6 | 1.4.0-6 |
| debian/vorbis-tools(Debian:14) | < 1.4.0-6 | 1.4.0-6 |
| xiph vorbis-tools | = 1.4.0 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
References
- Debian Security Tracker CVE-2014-9640 vendor-advisory
- advisories.mageia.org
- FEDORA-2015-1253 vendor-advisory
- openSUSE-SU-2015:0231 vendor-advisory
- MDVSA-2015:037 vendor-advisory
- [oss-security] 20150121 Re: CVE request: two issues in vorbis-tools mailing-list
- [oss-security] 20150122 Re: CVE request: two issues in vorbis-tools mailing-list
- trac.xiph.org
- trac.xiph.org
- bugs.debian.org issue-tracking