CVE-2007-4029
libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to...
CVE-2007-4029 is a medium vulnerability (CVSS 6.8) in Libvorbis, published July 26, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.67%, the 77th percentile. Fixed in libvorbis 1.2.0.dfsg-1.
- Severity
- 6.8 MediumCVSS 2.0, NVD
- Exploit chance
- 1.67%EPSS, 77th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.2.0.dfsg-1libvorbis +47 more
Description
libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service via (1) an invalid mapping type, which triggers an out-of-bounds read in the vorbis_info_clear function in info.c, and (2) invalid blocksize values that trigger a segmentation fault in the read function in block.c.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libvorbisDebian:12 | before 1.2.0.dfsg-1 | 1.2.0.dfsg-1 |
libvorbisDebian:13 | before 1.2.0.dfsg-1 | 1.2.0.dfsg-1 |
libvorbisDebian:14 | before 1.2.0.dfsg-1 | 1.2.0.dfsg-1 |
libvorbisidecDebian:12 | before 1.0.2+svn16259-2 | 1.0.2+svn16259-2 |
libvorbisidecDebian:13 | before 1.0.2+svn16259-2 | 1.0.2+svn16259-2 |
libvorbisidecDebian:14 | before 1.0.2+svn16259-2 | 1.0.2+svn16259-2 |
libvorbisDebian:4.0 From an advisory covering 4 CVEs | before 1.1.2.dfsg-1.3, plus listed versions 1.1.2.dfsg-1.2 | 1.1.2.dfsg-1.3 |
libvorbisDebian:3.1 From an advisory covering 4 CVEs | before 1.1.0-2, plus listed versions 1.1.0-1 | 1.1.0-2 |
libvorbisRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs | before 1:1.0-8.el3 | 1:1.0-8.el3 |
libvorbis-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs | before 1:1.0-8.el3 | 1:1.0-8.el3 |
Show 38 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libvorbis-develRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs | before 1:1.0-8.el3 | 1:1.0-8.el3 |
libvorbisRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs | before 1:1.0-8.el3 | 1:1.0-8.el3 |
libvorbis-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs | before 1:1.0-8.el3 | 1:1.0-8.el3 |
libvorbis-develRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs | before 1:1.0-8.el3 | 1:1.0-8.el3 |
libvorbisRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs | before 1:1.0-8.el3 | 1:1.0-8.el3 |
libvorbis-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs | before 1:1.0-8.el3 | 1:1.0-8.el3 |
libvorbis-develRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs | before 1:1.0-8.el3 | 1:1.0-8.el3 |
libvorbisRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs | before 1:1.0-8.el3 | 1:1.0-8.el3 |
libvorbis-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs | before 1:1.0-8.el3 | 1:1.0-8.el3 |
libvorbis-develRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs | before 1:1.0-8.el3 | 1:1.0-8.el3 |
libvorbisRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 1:1.1.0-2.el4.5 | 1:1.1.0-2.el4.5 |
libvorbis-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 1:1.1.0-2.el4.5 | 1:1.1.0-2.el4.5 |
libvorbis-develRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 1:1.1.0-2.el4.5 | 1:1.1.0-2.el4.5 |
libvorbisRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 1:1.1.0-2.el4.5 | 1:1.1.0-2.el4.5 |
libvorbis-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 1:1.1.0-2.el4.5 | 1:1.1.0-2.el4.5 |
libvorbis-develRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 1:1.1.0-2.el4.5 | 1:1.1.0-2.el4.5 |
libvorbisRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 1:1.1.0-2.el4.5 | 1:1.1.0-2.el4.5 |
libvorbis-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 1:1.1.0-2.el4.5 | 1:1.1.0-2.el4.5 |
libvorbis-develRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 1:1.1.0-2.el4.5 | 1:1.1.0-2.el4.5 |
libvorbisRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 1:1.1.0-2.el4.5 | 1:1.1.0-2.el4.5 |
libvorbis-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 1:1.1.0-2.el4.5 | 1:1.1.0-2.el4.5 |
libvorbis-develRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 1:1.1.0-2.el4.5 | 1:1.1.0-2.el4.5 |
libvorbisRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 1:1.1.2-3.el5.0 | 1:1.1.2-3.el5.0 |
libvorbis-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 1:1.1.2-3.el5.0 | 1:1.1.2-3.el5.0 |
libvorbis-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 1:1.1.2-3.el5.0 | 1:1.1.2-3.el5.0 |
libvorbisRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs | before 1:1.1.2-3.el5.0 | 1:1.1.2-3.el5.0 |
libvorbis-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs | before 1:1.1.2-3.el5.0 | 1:1.1.2-3.el5.0 |
libvorbisRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 1:1.1.2-3.el5.0 | 1:1.1.2-3.el5.0 |
libvorbis-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 1:1.1.2-3.el5.0 | 1:1.1.2-3.el5.0 |
libvorbis-develRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 1:1.1.2-3.el5.0 | 1:1.1.2-3.el5.0 |
libvorbisRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs | before 0:1.0rc2-7.el2 | 0:1.0rc2-7.el2 |
libvorbis-develRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs | before 0:1.0rc2-7.el2 | 0:1.0rc2-7.el2 |
libvorbisRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs | before 0:1.0rc2-7.el2 | 0:1.0rc2-7.el2 |
libvorbis-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs | before 0:1.0rc2-7.el2 | 0:1.0rc2-7.el2 |
libvorbisRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs | before 0:1.0rc2-7.el2 | 0:1.0rc2-7.el2 |
libvorbis-develRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs | before 0:1.0rc2-7.el2 | 0:1.0rc2-7.el2 |
libvorbisRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs | before 0:1.0rc2-7.el2 | 0:1.0rc2-7.el2 |
libvorbis-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs | before 0:1.0rc2-7.el2 | 0:1.0rc2-7.el2 |
What each source reports
NVD Score used
libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service via (1) an invalid mapping type, which triggers an out-of-bounds read in the vorbis_info_clear function in info.c, and (2) invalid blocksize values that trigger a segmentation fault in the read function in block.c.
- Record
CVE-2007-4029- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service via (1) an invalid mapping type, which triggers an out-of-bounds read in the vorbis_info_clear function in info.c, and (2) invalid blocksize values that trigger a segmentation fault in the read function in block.c.
- Record
CVE-2007-4029- Updated
- 2026-11-02
EUVDEUVD-2007-4013No score
libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service via (1) an invalid mapping type, which triggers an out-of-bounds read in the vorbis_info_clear function in info.c, and (2) invalid blocksize values that trigger a segmentation fault in the read function in block.c.
- Record
EUVD-2007-4013- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f885-7gr5-w3p4No score
libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to...
libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service via (1) an invalid mapping type, which triggers an out-of-bounds read in the vorbis_info_clear function in info.c, and (2) invalid blocksize values that trigger a segmentation fault in the read function in block.c.
- Record
GHSA-f885-7gr5-w3p4- Updated
- 2026-11-02
OSVNo score
libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service via (1) an invalid mapping type, which triggers an out-of-bounds read in the vorbis_info_clear function in info.c, and (2) invalid blocksize values that trigger a segmentation fault in the read function in block.c.
- Record
CVE-2007-4029- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-4029No score
libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service via (1) an invalid mapping type, which triggers an out-of-bounds read in the vorbis_info_clear function in info.c, and (2) invalid blocksize values that trigger a segmentation fault in the read function in block.c.
- Record
DEBIAN-CVE-2007-4029- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| aliases | ||
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
isecpartners.com/advisories/2007-003-libvorbis.txt
issues.rpath.com/browse/RPL-1590
ubuntu.com/usn/usn-498-1
vupen.com/english/advisories/2007/2760
exchange.xforce.ibmcloud.com/vulnerabilities/35624
secunia.com/advisories/26299
Show 43 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=249780
debian.org/security/2008/dsa-1471
redhat.com/support/errata/RHSA-2007-0912.html
security.gentoo.org/glsa/glsa-200710-03.xml
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10570
securitytracker.com/id?1018712
securityfocus.com/bid/25082
tellini.org/blog/archives/32-Music-Box-1.6.html
mandriva.com/security/advisories?name=MDKSA-2007:167-1
novell.com/linux/security/advisories/2007_23_sr.html
nvd.nist.gov/vuln/detail/CVE-2007-4029
github.com/advisories/GHSA-f885-7gr5-w3p4
security-tracker.debian.org/tracker/CVE-2007-4029
access.redhat.com/errata/RHSA-2007:0845
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0845.json
cve.org/CVERecord?id=CVE-2007-3106