SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

OVAL

[3.5] libvorbis: Multiple vulnerabilities (CVE-2017-14632, CVE-2017-14633)

ID: oval:org.secpod.oval:def:1800775	Date: (C)2018-03-28 (M)2022-02-04
Class: PATCH	Family: unix

CVE-2017-14632: Invalid freeing of uninitialized memory in the function vorbis_analysis_headerout Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout in info.c when vi-

Platform:

Alpine Linux 3.5

Product:

libvorbis

Reference:

8517

CVE-2017-14632

CVE-2017-14633


30479



423868



248392



909



195452



282