VDB
GCVE-110-MAGEIA-2018-70
GCVE-110-MAGEIA-2018-70
Advisory Published
Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing
uninitialized memory in the function vorbis_analysis_headerout() in
info.c when vi->channels<=0, a similar issue to Mozilla bug 550184.
(CVE-2017-14632)
In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability
exists in the function mapping0_forward() in mapping0.c, which may lead
to DoS when operating on a crafted audio file with vorbis_analysis().
(CVE-2017-14633)
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | akonadiconsole | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kontact | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | ksirk | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kimagemapeditor | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | telepathy-kde-accounts-kcm | 0 (affected), 17.12.2-2.mga6 (unaffected) | — |
| Mageia | krdc | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kmag | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kget | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | kross-interpreters | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | ksmtp | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kiten | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kdegraphics-thumbnailers | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kfind | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | kate | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | spectacle | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | ktouch | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kturtle | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | k3b | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kcontacts | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | kmahjongg | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | akregator | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | artikulate | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | semantik | 1.0.1-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | kdepim-addons | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | rocs | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | telepathy-kde-common-internals | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kapptemplate | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | kcalutils | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | ksystemlog | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | task-obsolete | 0 (affected), 6-128.mga6 (unaffected) | — |
| Mageia | telepathy-kde-auth-handler | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kalgebra | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | audiocd-kio | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | meta-task | 0 (affected), 6-2.1.mga6 (unaffected) | — |
| Mageia | ark | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kdf | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | picmi | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | akonadi-mime | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kdesdk-thumbnailers | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kgpg | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | libkeduvocdocument | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | dragon | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | libkipi | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | knavalbattle | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | incidenceeditor | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | libkdcraw | 0 (affected), 17.12.2-3.mga6 (unaffected) | — |
| Mageia | kcalc | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | mbox-importer | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | cantor | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | palapeli | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | akonadi-search | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | telepathy-kde-filetransfer-handler | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kjots | 0 (affected), 5.0.2-1.2.mga6 (unaffected) | — |
| Mageia | ktorrent | 5.1.0-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | dolphin-plugins | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | okular | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kmplot | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | grantleetheme | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kgeography | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | akonadi-notes | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | mailcommon | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | libkdepim | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kmailtransport | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | telepathy-kde-text-ui | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kigo | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kmines | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kde-dev-utils | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | signon-kwallet-extension | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | okteta | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | qupzilla | 0 (affected), 2.2.5-1.mga6 (unaffected) | — |
| Mageia | kholidays | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | libkdegames | 0 (affected), 17.12.2-2.mga6 (unaffected) | — |
| Mageia | python-incremental | 0 (affected), 17.5.0-1.mga6 (unaffected) | — |
| Mageia | sweeper | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | marble | 0 (affected), 17.12.2-1.1.mga6 (unaffected) | — |
| Mageia | skrooge | 0 (affected), 2.10.5-1.2.mga6 (unaffected) | — |
| Mageia | kdesdk-kioslaves | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kmime | 0 (affected), 17.12.2-1.1.mga6 (unaffected) | — |
| Mageia | kqtquickcharts | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | katomic | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | kbounce | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | blinken | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kbruch | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | minuet | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | kshisen | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kfloppy | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kde-dev-scripts | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | print-manager | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | telepathy-kde-call-ui | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kimap | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kalzium | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | krename | 0 (affected), 5.0.0-1.mga6 (unaffected) | — |
| Mageia | analitza | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | khelpcenter | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | ktimer | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kdegraphics-mobipocket | 0 (affected), 17.12.2-1.1.mga6 (unaffected) | — |
| Mageia | libkmahjongg | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kmail | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | libkcompactdisc | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | lskat | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kmouth | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | python-constantly | 0 (affected), 15.1.0-1.mga6 (unaffected) | — |
| Mageia | python-twisted | 0 (affected), 17.5.0-1.mga6 (unaffected) | — |
| Mageia | ksudoku | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | eventviews | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | kalarm | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | libvorbis | 1.3.5-2.1.mga6 (unaffected), 0 (affected), 1.3.5-2.1.mga6 (unaffected), 0 (affected) | — |
| Mageia | kspaceduel | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | kmix | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kblocks | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kdenlive | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kwave | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | svgpart | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | pim-data-exporter | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kfourinline | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | krfb | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | keditbookmarks | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | akonadi-calendar | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kpat | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kontactinterface | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | grantlee-editor | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | libkgeomap | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | poxml | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | mailimporter | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kbreakout | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | telepathy-kde-contact-runner | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | libgravatar | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kdepim-runtime | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kcachegrind | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kdbg | 0 (affected), 3.0.0-1.mga6 (unaffected) | — |
| Mageia | killbots | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | libkleo | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | ffmpegthumbs | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kgoldrunner | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | telepathy-kde-integration-module | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | akonadi-contacts | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | step | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | python-hyperlink | 0 (affected), 17.3.0-1.mga6 (unaffected) | — |
| Mageia | kmousetool | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | ksquares | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | knetwalk | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | klickety | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | korganizer | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | klines | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kmbox | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kubrick | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | telepathy-kde-contact-list | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kolourpaint | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | libkgapi | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | pimcommon | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | knotes | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kaccounts-integration | 0 (affected), 17.12.2-2.mga6 (unaffected) | — |
| Mageia | zanshin | 0.5.0-2.mga6 (unaffected), 0 (affected) | — |
| Mageia | libksieve | 0 (affected), 17.12.2-5.mga6 (unaffected) | — |
| Mageia | kpimtextedit | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kcalcore | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kreversi | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | libkomparediff2 | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | libkcddb | 0 (affected), 17.12.2-1.1.mga6 (unaffected) | — |
| Mageia | kcharselect | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | python-m2r | 0.1.13-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | klettres | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | pim-sieve-editor | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | telepathy-kde-send-file | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kolf | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kblackbox | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | ktuberling | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kdebugsettings | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | kdenetwork-filesharing | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | libkexiv2 | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | bomber | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | telepathy-kde-approver | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | zeroconf-ioslave | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kaccounts-providers | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | umbrello | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | lokalize | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | dolphin | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | filelight | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kwalletmanager | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kdepim-apps-libs | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kdav | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kwordquiz | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kig | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kaddressbook | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kblog | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kldap | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | messagelib | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kcron | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | gwenview | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | ktnef | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | kleopatra | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kteatime | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kanagram | 17.12.2-2.mga6 (unaffected), 0 (affected) | — |
| Mageia | juk | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kdialog | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | granatier | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | telepathy-kde-desktop-applets | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | parley | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | libktorrent | 0 (affected), 2.1-1.mga6 (unaffected) | — |
| Mageia | kmail-account-wizard | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kidentitymanagement | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | calendarsupport | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kapman | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kjumpingcube | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kollision | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | akonadi | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | syndication | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | konqueror | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | akonadi-calendar-tools | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | konquest | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | python-automat | 0 (affected), 0.6.0-1.mga6 (unaffected) | — |
| Mageia | kiriki | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kajongg | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | cervisia | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | akonadi-import-wizard | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | kcolorchooser | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | bovo | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kompare | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | baloo-widgets | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | libksane | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kruler | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kdeedu-data | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kio-extras | 0 (affected), 17.12.2-4.mga6 (unaffected) | — |
| Mageia | kalarmcal | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | khangman | 17.12.2-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | konsole | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kdiamond | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | ksnakeduel | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
| Mageia | kamera | 0 (affected), 17.12.2-1.mga6 (unaffected) | — |
Aliases
References
Browse GCVE Records
21,084 records in the GCVE database · Updated October 20, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.