https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:21:45 +0000 https://cve.radiocsirt.org/vuln/alsa-2019:3703 <p><strong>Affected:</strong> AlmaLinux:8: libvorbis, AlmaLinux:8: libvorbis-devel, AlmaLinux:8: libvorbis-devel-docs</p> <p>The libvorbis package contains runtime libraries for use in programs that support Ogg Vorbis, a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed format for audio and music at fixed and variable bitrates.</p> <p>Security Fix(es):</p> <p>* libvorbis: heap buffer overflow in mapping0_forward function (CVE-2018-10392)</p> <p>* libvorbis: stack buffer overflow in bark_noise_hybridmp function (CVE-2018-10393)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: libvorbis, AlmaLinux:8: libvorbis-devel, AlmaLinux:8: libvorbis-devel-docs</p> <p>The libvorbis package contains runtime libraries for use in programs that support Ogg Vorbis, a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed format for audio and music at fixed and variable bitrates.</p> <p>Security Fix(es):</p> <p>* libvorbis: heap buffer overflow in mapping0_forward function (CVE-2018-10392)</p> <p>* libvorbis: stack buffer overflow in bark_noise_hybridmp function (CVE-2018-10393)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2019:3703 https://cve.radiocsirt.org/vuln/bdu:2020-03313 bdu:2020-03313 https://cve.radiocsirt.org/vuln/bdu:2020-03313 https://cve.radiocsirt.org/vuln/bell-cve-2018-10392 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2018-10392 https://cve.radiocsirt.org/vuln/cnvd-2018-08909 cnvd-2018-08909 https://cve.radiocsirt.org/vuln/cnvd-2018-08909 https://cve.radiocsirt.org/vuln/euvd-2026-64628 EUVD-2026-64628 https://cve.radiocsirt.org/vuln/euvd-2026-64628 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10392 <p>mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have unspecified other impact via a crafted file.</p> <p>mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have unspecified other impact via a crafted file.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-10392 https://cve.radiocsirt.org/vuln/ghsa-gqh4-wfj8-7856 <p>mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have unspecified other impact via a crafted file.</p> <p>mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have unspecified other impact via a crafted file.</p> https://cve.radiocsirt.org/vuln/ghsa-gqh4-wfj8-7856 https://cve.radiocsirt.org/vuln/gsd-2018-10392 gsd-2018-10392 https://cve.radiocsirt.org/vuln/gsd-2018-10392 https://cve.radiocsirt.org/vuln/msrc_cve-2018-10392 msrc_CVE-2018-10392 https://cve.radiocsirt.org/vuln/msrc_cve-2018-10392 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11009-1 <p>libvorbis-devel-1.3.7-1.6 on GA media</p> <p>libvorbis-devel-1.3.7-1.6 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11009-1 https://cve.radiocsirt.org/vuln/suse-su-2018:1563-1 <p>Security update for libvorbis</p> <p>Security update for libvorbis</p> https://cve.radiocsirt.org/vuln/suse-su-2018:1563-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-10392 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libvorbis, Ubuntu:18.04:LTS: libvorbis</p> <p>mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have unspecified other impact via a crafted file.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libvorbis, Ubuntu:18.04:LTS: libvorbis</p> <p>mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have unspecified other impact via a crafted file.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-10392