CVE-2017-11735
Updated libvorbis packages fix security vulnerabilities
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue in the originally named product. Notes: none
What each source reports
CVE List No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue in the originally named product. Notes: none
- Record
CVE-2017-11735- Updated
- 2026-11-02
EUVDEUVD-2017-3345 No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue in the originally named product. Notes: none
- Record
EUVD-2017-3345- Updated
- 2026-11-03
NVD No score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue in the originally named product. Notes: none
- Record
CVE-2017-11735- Updated
- 2026-11-02
OSVMGASA-2019-0059 No score
Updated libvorbis packages fix security vulnerabilities
The vorbis library version 1.3.6 fix security vulnerabilities:
- CVE-2017-11735 libvorbis: NULL pointer dereference in vorbis_block_clear function in lib/block.c
- CVE-2017-11333 libvorbis: Memory exhaustion in vorbis_analysis_wrote function in lib/block.c
- Record
MGASA-2019-0059- Updated
- 2026-11-02
OSVUBUNTU-CVE-2017-11735 No score
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue in the originally named product. Notes: none.
- Record
UBUNTU-CVE-2017-11735- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libvorbisMageia:6 From an advisory covering 2 CVEs |
before 1.3.6-1.mga6 | 1.3.6-1.mga6 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | libvorbis 1.3.5 - Multiple Vulnerabilities | 2017-07-31 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-11735 has been rejected by its source and should not be treated as a live vulnerability, published July 31, 2017. Public exploit code exists.
References
advisories.mageia.org/MGASA-2019-0059.html
bugs.mageia.org/show_bug.cgi?id=24252
lists.opensuse.org/opensuse-updates/2018-05/msg00067.html
lists.suse.com/pipermail/sle-security-updates/2018-June/004158.html
ubuntu.com/security/CVE-2017-11735
seclists.org/fulldisclosure/2017/Jul/82
cve.org/CVERecord?id=CVE-2017-11735