mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have unspecified other impact via a crafted file.
References
Link | Resource |
---|---|
https://access.redhat.com/errata/RHSA-2019:3703 | Third Party Advisory |
https://gitlab.xiph.org/xiph/vorbis/issues/2335 | Exploit Issue Tracking Vendor Advisory |
https://lists.debian.org/debian-lts-announce/2019/11/msg00031.html | Mailing List Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2021/11/msg00023.html | Mailing List Third Party Advisory |
https://security.gentoo.org/glsa/202003-36 | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2018-04-26T05:00:00
Updated: 2021-11-27T21:06:09
Reserved: 2018-04-25T00:00:00
Link: CVE-2018-10392
JSON object: View
NVD Information
Status : Analyzed
Published: 2018-04-26T05:29:00.343
Modified: 2021-11-30T22:13:19.347
Link: CVE-2018-10392
JSON object: View
Redhat Information
No data.