{"id":"CVE-2017-11735","aliases":["EUVD-2017-3345","MGASA-2019-0059","UBUNTU-CVE-2017-11735"],"status":"rejected","title":"Updated libvorbis packages fix security vulnerabilities","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue in the originally named product.  Notes: none","facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2017-07-31T13:00:00Z","modified":"2026-04-16T06:25:09Z","exploits":[{"source":"exploitdb","id":"EDB-42399","title":"libvorbis 1.3.5 - Multiple Vulnerabilities","type":"dos","platform":"linux","date":"2017-07-31","url":"https://www.exploit-db.com/exploits/42399"}],"affected":[{"source":"osv","ecosystem":"Mageia:6","package":"libvorbis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-1.mga6"}]}],"bundled":2}],"references":[{"url":"https://advisories.mageia.org/MGASA-2019-0059.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24252","tags":["report"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-05/msg00067.html","tags":["web"]},{"url":"http://lists.suse.com/pipermail/sle-security-updates/2018-June/004158.html","tags":["web"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-06/msg00047.html","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-11735","tags":["report"]},{"url":"http://seclists.org/fulldisclosure/2017/Jul/82","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-11735","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-11735","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue in the originally named product.  Notes: none","status":"rejected","published":"2017-07-31T13:00:00Z","modified":"2017-10-09T04:57:01Z","updated_at":"2026-11-02T14:33:19.848632Z"}],"euvd":[{"id":"EUVD-2017-3345","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue in the originally named product.  Notes: none","status":"published","published":"2017-07-31T13:00:00Z","modified":"2017-10-09T04:57:01Z","updated_at":"2026-11-03T04:07:48.301361Z"}],"nvd":[{"id":"CVE-2017-11735","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue in the originally named product.  Notes: none","status":"rejected","published":"2017-07-31T13:29:01.597Z","modified":"2023-11-07T02:38:19.863Z","updated_at":"2026-11-02T14:03:54.862898Z"}],"osv":[{"id":"MGASA-2019-0059","title":"Updated libvorbis packages fix security vulnerabilities","description":"The vorbis library version 1.3.6  fix security vulnerabilities:\n- CVE-2017-11735 libvorbis: NULL pointer dereference in\nvorbis_block_clear function in lib/block.c \n- CVE-2017-11333 libvorbis: Memory exhaustion in vorbis_analysis_wrote\nfunction in lib/block.c\n","status":"published","published":"2019-01-31T22:55:16Z","modified":"2026-04-16T06:25:09.485642327Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"UBUNTU-CVE-2017-11735","description":"** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue in the originally named product.  Notes: none.","status":"withdrawn","published":"2017-07-31T13:29:00Z","modified":"2025-08-01T04:50:36Z","updated_at":"2026-11-02T15:54:13.729565Z"}]}}