VYPR

rpm package

suse/libvorbis&distro=SUSE Linux Enterprise Module for Basesystem 15

pkg:rpm/suse/libvorbis&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015

Vulnerabilities (1)

  • CVE-2018-10392Apr 26, 2018
    affected < 1.3.6-4.3.1fixed 1.3.6-4.3.1

    mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have unspecified other impact via a crafted file.