suse · CVE-2017-11331

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2017-11331 severity low: SUSE including 2 source package names (vorbis-tools, vorbis-tools-lang), 10 product×package rows across 5 product lines (SUSE Linux Enterprise Desktop 12 SP3, SUSE Linux Enterprise Server 12 SP1-LTSS, … (5 product lines)): Known Not Affected 10.

Description:

The wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (memory allocation error) via a crafted wav file.