CVE-2017-11333
First published: Mon Jul 31 2017(Updated: )
The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (OOM) via a crafted wav file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Xiph.Org libvorbis | =1.3.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-11333?
The severity of CVE-2017-11333 is classified as medium with a score of 5.5.
How do I fix CVE-2017-11333?
To fix CVE-2017-11333, upgrade Xiph.Org libvorbis to a version later than 1.3.5.
What type of attack does CVE-2017-11333 involve?
CVE-2017-11333 involves a denial of service attack that can be executed through a crafted WAV file.
Which software is affected by CVE-2017-11333?
CVE-2017-11333 affects Xiph.Org libvorbis version 1.3.5.
What is the potential impact of CVE-2017-11333?
The potential impact of CVE-2017-11333 is an out-of-memory (OOM) condition that may lead to service disruption.
- collector/nvd-index
- vendor/xiph.org
- product/libvorbis
- canonical/xiph.org libvorbis