]> code.ossystems Code Review - openembedded-core.git/commit
Code Review / openembedded-core.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: c1b711e) | patch
libvorbis: CVE-2017-14633
authorTanu Kaskinen <tanuk@iki.fi>
Sat, 31 Mar 2018 05:21:30 +0000 (08:21 +0300)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Sat, 31 Mar 2018 13:17:16 +0000 (14:17 +0100)
commit300b5e921460f8ab1d4870014b343eddd00e77b1
tree84d94f9557b34226b7c8e9b7c51eabad3f0781fetree | snapshot
parentc1b711e265e2ff6ba74b0f6f568f231ddf476f8bcommit | diff
libvorbis: CVE-2017-14633

In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability
exists in the function mapping0_forward() in mapping0.c, which may lead
to DoS when operating on a crafted audio file with vorbis_analysis().

References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633

Signed-off-by: Tanu Kaskinen <tanuk@iki.fi>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-multimedia/libvorbis/libvorbis/CVE-2017-14633.patch [new file with mode: 0644] blob
meta/recipes-multimedia/libvorbis/libvorbis_1.3.5.bb diff | blob | history
Mirror of the official openembedded-core repository