According to the versions of the libvorbis package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - mapping0_forward in mapping0.c in Xiph.Org libvorbis     1.3.6 does not validate the number of channels, which     allows remote attackers to cause a denial of service     (heap-based buffer overflow or over-read) or possibly     have unspecified other impact via a crafted     file.(CVE-2018-10392)

  - bark_noise_hybridmp in psy.c in Xiph.Org libvorbis     1.3.6 has a stack-based buffer     over-read.(CVE-2018-10393)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Sync with git (CVE-2017-14160, CVE-2018-10392, CVE-2018-10393, bz#1516379)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libvorbis packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - bark_noise_hybridmp in psy.c in Xiph.Org libvorbis     1.3.6 has a stack-based buffer     over-read.(CVE-2018-10393)

  - The bark_noise_hybridmp function in psy.c in Xiph.Org     libvorbis 1.3.5 allows remote attackers to cause a     denial of service (out-of-bounds access and application     crash) or possibly have unspecified other impact via a     crafted mp4 file.(CVE-2017-14160)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libvorbis fixes the following issues: Security issues fixed :

  - CVE-2018-10393: Fixed stack-based buffer over-read in     bark_noise_hybridm (bsc#1091072).

  - CVE-2017-14160: Fixed out-of-bounds access inside     bark_noise_hybridmp function (bsc#1059812).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

MinGW cross compiled libvorbis 1.3.6 + various patches backported from git.

This is a security fix for: CVE-2017-11333 CVE-2017-11735 CVE-2017-14160 CVE-2017-14632 CVE-2017-14633 CVE-2018-5146 CVE-2018-10392 CVE-2018-10393

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
142234	EulerOS 2.0 SP2 : libvorbis (EulerOS-SA-2020-2363)	Nessus	Huawei Local Security Checks	2020/11/3	2024/2/12	high
120203	Fedora 28 : 1:libvorbis (2018-0259281ab6)	Nessus	Fedora Local Security Checks	2019/1/3	2021/1/6	high
152292	EulerOS 2.0 SP9 : libvorbis (EulerOS-SA-2021-2274)	Nessus	Huawei Local Security Checks	2021/8/9	2023/12/6	high
152331	EulerOS 2.0 SP9 : libvorbis (EulerOS-SA-2021-2248)	Nessus	Huawei Local Security Checks	2021/8/9	2023/12/6	high
109888	SUSE SLES11 Security Update : libvorbis (SUSE-SU-2018:1321-1)	Nessus	SuSE Local Security Checks	2018/5/17	2021/1/19	high
121318	Fedora 29 : mingw-libvorbis (2019-2e385f97e2)	Nessus	Fedora Local Security Checks	2019/1/23	2024/6/26	critical

偵測

搜尋 Plugin

high

high

high

high

high

critical