Out-of-bounds read in libvorbis - CVE-2017-14160

Vulnerability identifier: #VU12882

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-14160

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

the vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists in the bark_noise_hybridmp function in psy.c due to out-of-bounds read. A remote attacker can trick the victim into opening a specially crafted mp4 file and cause the service to crash.

libvorbis
Gentoo Linux
Slackware Linux
Ubuntu
Fedora
libvorbis (Alpine package)
openSUSE Leap
libvorbisenc2 (Ubuntu package)
libvorbis0a (Ubuntu package)
libvorbisfile3 (Ubuntu package)
mingw-libvorbis
libvorbis

Install update from vendor's website.

libvorbis (Alpine package) - update to 1.3.5-r2
libvorbisenc2 (Ubuntu package) - update to 1.3.5-3ubuntu0.2+esm1
libvorbis0a (Ubuntu package) - update to 1.3.5-3ubuntu0.2+esm1
libvorbisfile3 (Ubuntu package) - update to 1.3.5-3ubuntu0.2+esm1
mingw-libvorbis - update to 1.3.6-2.fc29
libvorbis - update to 1.3.6-3.fc28

• http://openwall.com/lists/oss-security/2017/09/21/2

• OpenSUSE Linux update for libvorbis
• Gentoo update for libvorbis
• Slackware Linux update for libvorbis
• Out-of-bounds read in libvorbis (Alpine package)
• Ubuntu update for libvorbis
• Fedora 28 update for libvorbis
• Fedora 29 update for mingw-libvorbis