CVE-2017-11333
Fixed in a distro release EPSS 5%
The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (OOM) via a crafted wav file.
Products: xiph.org libvorbis
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | libvorbis | 1.3.6-1 |
| Debian 12 | libvorbis | 1.3.5-4.1 |
| Debian 13 | libvorbis | 1.3.5-4.1 |
| Debian 14 | libvorbis | 1.3.5-4.1 |
| Debian 7 | libvorbis | 1.3.2-1.3+deb7u1 |
| Debian 8 | libvorbis | 1.3.4-2+deb8u3 |
| Debian 9 | libvorbis | 1.3.5-4+deb9u1 |
| Ubuntu 14.04 LTS | libvorbis | 1.3.2-1.3ubuntu1.1 |
| Ubuntu 16.04 LTS | libvorbis | 1.3.5-3ubuntu0.1 |