Vulnerability Details : CVE-2015-6749
Potential exploit
Buffer overflow in the aiff_open function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted AIFF file.
Vulnerability category: OverflowDenial of service
Products affected by CVE-2015-6749
- cpe:2.3:a:xiph:vorbis-tools:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2015-6749
1.97%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 82 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2015-6749
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:N/I:N/A:P |
8.6
|
2.9
|
NIST |
CWE ids for CVE-2015-6749
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by: nvd@nist.gov (Primary)
References for CVE-2015-6749
-
http://lists.opensuse.org/opensuse-updates/2015-10/msg00013.html
openSUSE-SU-2015:1686-1: moderate: Security update for vorbis-tools
-
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165555.html
[SECURITY] Fedora 23 Update: vorbis-tools-1.4.0-22.fc23
-
https://bugzilla.redhat.com/show_bug.cgi?id=1258424
1258424 – vorbis-tools: Bufer overflow in aiff_open function
-
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=797461
#797461 - vorbis-tools: CVE-2015-6749 invalid AIFF file cause alloca() buffer overflow - Debian Bug report logs
-
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166424.html
[SECURITY] Fedora 22 Update: vorbis-tools-1.4.0-20.fc22
-
http://seclists.org/oss-sec/2015/q3/457
oss-sec: Re: CVE request: vorbis-tools: buffer overflow in aiff_open()
-
https://bugzilla.redhat.com/show_bug.cgi?id=1258443
1258443 – (CVE-2015-6749) CVE-2015-6749 vorbis-tools: invalid AIFF file causes alloca() buffer overflow
-
http://seclists.org/oss-sec/2015/q3/455
oss-sec: CVE request: vorbis-tools: buffer overflow in aiff_open()
-
https://trac.xiph.org/attachment/ticket/2212/0001-oggenc-Fix-large-alloca-on-bad-AIFF-input.patch
0001-oggenc-Fix-large-alloca-on-bad-AIFF-input.patch on Ticket #2212 – Attachment – Xiph
-
https://trac.xiph.org/ticket/2212
#2212 (oggenc aiff_open buffer overflow) – XiphExploit
Jump to