CVE-2017-11331 The wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (memory allocation error) via a crafted wav file.
MediumCVSS 5.5
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (memory allocation error) via a crafted wav file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu/vorbis-tools(Ubuntu:22.04) | All versions | No fix listed |
| debian/vorbis-tools(Debian:12) | All versions | No fix listed |
| debian/vorbis-tools(Debian:12) | = 1.4.2-1 | No fix listed |
| debian/vorbis-tools(Debian:12) | = 1.4.2-2 | No fix listed |
| debian/vorbis-tools(Debian:12) | = 1.4.3-1 | No fix listed |
| debian/vorbis-tools(Debian:13) | < 1.4.3-1 | 1.4.3-1 |
| debian/vorbis-tools(Debian:14) | < 1.4.3-1 | 1.4.3-1 |
| xiph vorbis-tools | = 1.4.0 | No fix listed |
| ubuntu/vorbis-tools(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/vorbis-tools(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/vorbis-tools(Ubuntu:26.10) | All versions | No fix listed |
References
- Debian Security Tracker CVE-2017-11331 vendor-advisory
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- seclists.org mailing-list third-party-advisory
- 42397 exploit third-party-advisory vdb-entry