CVE-2023-43361

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-43361
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-43361.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-43361
Downstream
ALPINE (1)
ALSA (1)
AZL (2)
CLEANSTART (1)
CLSA (2)
DEBIAN (1)
MGASA (1)
OESA (1)
openSUSE (1)
RHSA (1)
RLSA (1)
SUSE (2)
UBUNTU (1)
Related
ALSA (1)
openSUSE (1)
SUSE (2)
Published
2023-10-02T00:00:00Z
Modified
2026-10-28T02:30:54Z
Summary
[none]
Details

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files.

Database specific 
{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/43xxx/CVE-2023-43361.json"
}
References

Affected packages

Git / github.com/xiph/vorbis-tools

Affected ranges

Type
GIT
Repo
https://github.com/xiph/vorbis-tools
Events
Introduced
71687237c07cd9d5564c73990d0de45520c5bec1
Last Affected
71687237c07cd9d5564c73990d0de45520c5bec1
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:xiph:vorbis-tools:1.4.2:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.4.2"
                },
                {
                    "last_affected": "1.4.2"
                }
            ],
            "source": "CPE_STRING"
        }
    ]
}

Affected versions

1.*
1.4.2
v1.*
v1.4.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-43361.json"