CVE-2007-4029: Medium severity rPath rPath Linux vulnerability
libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service via (1) an invalid mapping type, which triggers an out-of-bounds read in the vorbisinfoclear function in info.c, and (2) invalid blocksize values that trigger a segmentation fault in the read function in block.c.
Other sources
Multiple flaws have been found in libvorbis. These are fixed via libvorbis version 1.2.0.
It should be noted that libvorbis 1.2.0 also fixes the issue described in bug 245991.
The id number of each flaw is the subversion commit id. The descriptions were provided by Chris Montgomery. The libvorbis subversion repository is located here: http://svn.xiph.org/trunk/vorbis
13217: possible seek infinite loop in libvorbisfile 13215: multiplexed/non Vorbis stream support [heap read, potential heap write] 13211: better return value checking of seeks [heap read, potential heap write] 13179: check legal maximum blocksize [static array read] 13169,13170,13172: correctly handle codebooks with zero entires [heap read/write] 13168: low bitrate static mode declaration error [static read, heap read, potential heap write] 13151,13153,13154,13155,13167: residue decode vector overflow [heap read/write] 13162: static initializer declarations, check-before-free error fixes [heap read/write] 13149: check legal minimum blocksize [static array read]
— Red Hat
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2007-4029?
CVE-2007-4029 has been rated as a medium severity vulnerability.
How do I fix CVE-2007-4029?
To fix CVE-2007-4029, upgrade to libvorbis version 1.2.0 or later.
What software versions are affected by CVE-2007-4029?
CVE-2007-4029 affects libvorbis versions prior to 1.2.0, specifically 1.1.2 and other earlier versions.
What is the impact of CVE-2007-4029?
CVE-2007-4029 can lead to a denial of service condition due to an out-of-bounds read and segmentation fault.
Is CVE-2007-4029 present in all distributions?
CVE-2007-4029 is reported in specific versions of the libvorbis package in certain Linux distributions.