Buffer Overflow in Vorbis-tools by Xiph.org
CVE-2023-43361

7.8HIGH

Key Information:

Vendor

Xiph

Status
Vorbis-tools
Vendor
CVE Published:
2 October 2023

What is CVE-2023-43361?

The buffer overflow vulnerability in Vorbis-tools version 1.4.2 allows local attackers to exploit the software during the conversion of WAV files to OGG files. This exploitation may lead to arbitrary code execution and cause a denial of service, compromising the integrity and availability of the system. Users and administrators are urged to apply the necessary updates and monitor for any unusual activity.

References

https://github.com/xiph/vorbis-tools/issues/41
https://github.com/xiph/vorbis-tools
https://github.com/xiph/vorbis

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.