CVE-2017-11333

Priority
Description
The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis
1.3.5 allows remote attackers to cause a denial of service (OOM) via a
crafted wav file.
References
Bugs
Notes
mdeslaursame fix as CVE-2017-14633
Package
Upstream:needs-triage
Ubuntu 18.04 LTS:not-affected (1.3.5-4.1)
Ubuntu 16.04 ESM:released (1.3.5-3ubuntu0.1)
Ubuntu 14.04 ESM:DNE (trusty was released [1.3.2-1.3ubuntu1.1])
Patches:
Upstream:https://gitlab.xiph.org/xiph/vorbis/commit/a79ec216cd119069c68b8f3542c6a425a74ab993
More Information

Updated: 2022-04-13 12:52:30 UTC (commit f411bd370d482ef4385c4e751d121a4055fbc009)