REDHAT-BUG-2242151: Buffer Overflow

Published Oct 4, 2023

Updated

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files.

https://github.com/xiph/vorbis-tools https://github.com/xiph/vorbis-tools/issues/41 https://github.com/xiph/vorbis https://xiph.org/vorbis/

Affected Software

1 affected component

xiph vorbis-tools

Event History

Oct 4, 2023

Data Sourced

via Red Hat·04:02 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2242151?

The severity of REDHAT-BUG-2242151 is critical due to the potential for arbitrary code execution and denial of service.

How do I fix REDHAT-BUG-2242151?

To fix REDHAT-BUG-2242151, update Vorbis-tools to the latest version that includes security patches.

Who is affected by REDHAT-BUG-2242151?

REDHAT-BUG-2242151 affects local users running Vorbis-tools v.1.4.2 on vulnerable systems.

Can REDHAT-BUG-2242151 be exploited remotely?

No, REDHAT-BUG-2242151 requires local access to exploit the buffer overflow vulnerability.

What software is impacted by REDHAT-BUG-2242151?

REDHAT-BUG-2242151 specifically impacts Xiph Vorbis-tools version 1.4.2.