Wind River Support Network

HomeDefectsLIN10-1025

Fixed

LIN10-1025 : Security Advisory - libvorbis - CVE-2017-11333

Created: Aug 11, 2017 Updated: Mar 27, 2019

Resolved Date: Mar 12, 2019

Found In Version: 10.17.41.1

Fix Version: 10.17.41.15

Severity: Standard

Applicable for: Wind River Linux LTS 17

Component/s: Userspace

Description

The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (OOM) via a crafted wav file.

https://nvd.nist.gov/vuln/detail/CVE-2017-11333

CVEs

CVE-2017-11333