Alpine/libvorbis: high 8.8
mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read
Action: Upgrade libvorbis to 1.3.6-r1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.6-r1 | - |
Fixed versions
| 1.3.6-r1 |
Sources
- osv: ALPINE-CVE-2018-10392#Alpine:v3.22/libvorbis
- https://security.alpinelinux.org/vuln/CVE-2018-10392
published · modified · JSON