The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact via a crafted mp4 file.

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5420-1 advisory.

  - The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a     denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact     via a crafted mp4 file. (CVE-2017-14160)

  - mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which     allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly     have unspecified other impact via a crafted file. (CVE-2018-10392)

  - bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.
    (CVE-2018-10393)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libvorbis package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a     denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact     via a crafted mp4 file. (CVE-2017-14160)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2828 advisory.

  - The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a     denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact     via a crafted mp4 file. (CVE-2017-14160)

  - mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which     allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly     have unspecified other impact via a crafted file. (CVE-2018-10392)

  - bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.
    (CVE-2018-10393)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libvorbis packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - bark_noise_hybridmp in psy.c in Xiph.Org libvorbis     1.3.6 has a stack-based buffer     over-read.(CVE-2018-10393)

  - The bark_noise_hybridmp function in psy.c in Xiph.Org     libvorbis 1.3.5 allows remote attackers to cause a     denial of service (out-of-bounds access and application     crash) or possibly have unspecified other impact via a     crafted mp4 file.(CVE-2017-14160)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libvorbis package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The bark_noise_hybridmp function in psy.c in Xiph.Org     libvorbis 1.3.5 allows remote attackers to cause a     denial of service (out-of-bounds access and application     crash) or possibly have unspecified other impact via a     crafted mp4 file.(CVE-2017-14160)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libvorbis package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - mapping0_forward in mapping0.c in Xiph.Org libvorbis     1.3.6 does not validate the number of channels, which     allows remote attackers to cause a denial of service     (heap-based buffer overflow or over-read) or possibly     have unspecified other impact via a crafted     file.(CVE-2018-10392)

  - The bark_noise_hybridmp function in psy.c in Xiph.Org     libvorbis 1.3.5 allows remote attackers to cause a     denial of service (out-of-bounds access and application     crash) or possibly have unspecified other impact via a     crafted mp4 file.(CVE-2017-14160)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New libvorbis packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.

Two vulnerabilities were fixed in the upstream repository :

- The bark_noise_hybridmp function allows remote attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact via a crafted file.

- mapping0_forward does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have unspecified other impact via a crafted file.

The remote host is affected by the vulnerability described in GLSA-202003-36 (libvorbis: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in libvorbis. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker, by enticing the user to process a specially crafted       audio file, could possibly cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

According to the versions of the libvorbis package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - bark_noise_hybridmp in psy.c in Xiph.Org libvorbis     1.3.6 has a stack-based buffer     over-read.(CVE-2018-10393)

  - mapping0_forward in mapping0.c in Xiph.Org libvorbis     1.3.6 does not validate the number of channels, which     allows remote attackers to cause a denial of service     (heap-based buffer overflow or over-read) or possibly     have unspecified other impact via a crafted     file.(CVE-2018-10392)

  - The bark_noise_hybridmp function in psy.c in Xiph.Org     libvorbis 1.3.5 allows remote attackers to cause a     denial of service (out-of-bounds access and application     crash) or possibly have unspecified other impact via a     crafted mp4 file.(CVE-2017-14160)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several issues have been found in libvorbis, a decoder library for Vorbis General Audio Compression Codec.

The fix for CVE-2017-14160 and CVE-2018-10393 improve the bound checking for very low sample rates.

CVE-2018-10392 was found because the number of channels was not validated and a remote attacker could cause a denial of service.

For Debian 8 'Jessie', these problems have been fixed in version 1.3.4-2+deb8u2.

We recommend that you upgrade your libvorbis packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

MinGW cross compiled libvorbis 1.3.6 + various patches backported from git.

This is a security fix for: CVE-2017-11333 CVE-2017-11735 CVE-2017-14160 CVE-2017-14632 CVE-2017-14633 CVE-2018-5146 CVE-2018-10392 CVE-2018-10393

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Sync with git (CVE-2017-14160, CVE-2018-10392, CVE-2018-10393, bz#1516379)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libvorbis fixes the following issues :

Security issues fixed :

  - CVE-2018-10393: Fixed stack-based buffer over-read in     bark_noise_hybridm (bsc#1091072).

  - CVE-2017-14160: Fixed out-of-bounds access inside     bark_noise_hybridmp function (bsc#1059812).

This update was imported from the SUSE:SLE-12:Update update project.

This update for libvorbis fixes the following issues: Security issues fixed :

  - CVE-2018-10393: Fixed stack-based buffer over-read in     bark_noise_hybridm (bsc#1091072).

  - CVE-2017-14160: Fixed out-of-bounds access inside     bark_noise_hybridmp function (bsc#1059812).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
161171	Ubuntu 16.04 ESM : Vorbis vulnerabilities (USN-5420-1)	Nessus	Ubuntu Local Security Checks	high
157990	EulerOS Virtualization 3.0.6.0 : libvorbis (EulerOS-SA-2022-1080)	Nessus	Huawei Local Security Checks	high
155711	Debian DLA-2828-1 : libvorbis - LTS security update	Nessus	Debian Local Security Checks	high
152331	EulerOS 2.0 SP9 : libvorbis (EulerOS-SA-2021-2248)	Nessus	Huawei Local Security Checks	high
152297	EulerOS 2.0 SP8 : libvorbis (EulerOS-SA-2021-2304)	Nessus	Huawei Local Security Checks	high
152292	EulerOS 2.0 SP9 : libvorbis (EulerOS-SA-2021-2274)	Nessus	Huawei Local Security Checks	high
140874	EulerOS 2.0 SP3 : libvorbis (EulerOS-SA-2020-2107)	Nessus	Huawei Local Security Checks	high
138131	Slackware 14.0 / 14.1 / 14.2 / current : libvorbis (SSA:2020-186-01)	Nessus	Slackware Local Security Checks	high
137869	FreeBSD : libvorbis -- two vulnerabilities (4200d5f5-b985-11ea-b08a-f8b156b6dcc8)	Nessus	FreeBSD Local Security Checks	high
134642	GLSA-202003-36 : libvorbis: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
131510	EulerOS Virtualization for ARM 64 3.0.3.0 : libvorbis (EulerOS-SA-2019-2345)	Nessus	Huawei Local Security Checks	high
131431	Debian DLA-2013-1 : libvorbis security update	Nessus	Debian Local Security Checks	high
121318	Fedora 29 : mingw-libvorbis (2019-2e385f97e2)	Nessus	Fedora Local Security Checks	critical
120203	Fedora 28 : 1:libvorbis (2018-0259281ab6)	Nessus	Fedora Local Security Checks	high
109932	openSUSE Security Update : libvorbis (openSUSE-2018-472)	Nessus	SuSE Local Security Checks	high
109891	SUSE SLED12 / SLES12 Security Update : libvorbis (SUSE-SU-2018:1324-1)	Nessus	SuSE Local Security Checks	high
109888	SUSE SLES11 Security Update : libvorbis (SUSE-SU-2018:1321-1)	Nessus	SuSE Local Security Checks	high
106160	EulerOS 2.0 SP2 : libvorbis (EulerOS-SA-2018-1019)	Nessus	Huawei Local Security Checks	high
106159	EulerOS 2.0 SP1 : libvorbis (EulerOS-SA-2018-1018)	Nessus	Huawei Local Security Checks	high

Detections

Analytics

CVE-2017-14160

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

critical

high

high

high

high

high

high