libvorbis vulnerabilities (Ubuntu)

7 vulnerabilities.

• libvorbis Ubuntu bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read. CVE-2018-10393 Fix available 7.5 HighApril 26, 2018
• libvorbis Ubuntu mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of... CVE-2018-10392 Fix available 8.8 HighApril 26, 2018
• libvorbis Ubuntu An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own... CVE-2018-5146 Public exploitFix available EPSS 11.9% 8.8 HighMarch 16, 2018
• libvorbis Ubuntu The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to... CVE-2017-14160 Fix available 8.8 HighSeptember 21, 2017
• libvorbis Ubuntu In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function... CVE-2017-14633 Fix available 6.5 MediumSeptember 21, 2017
• libvorbis Ubuntu Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the... CVE-2017-14632 Fix available 9.8 CriticalSeptember 21, 2017
• libvorbis Ubuntu The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote... CVE-2017-11333 Public exploitFix available 5.5 MediumJuly 31, 2017