Bugzilla – Bug 914441
VUL-0: CVE-2014-9639: vorbis-tools: Oggenc channel integer overflow
Last modified: 2016-04-27 19:34:05 UTC
CVE-2014-9639 discovered an integer overflow issue in oggenc, related to the number of channels in the input WAV file. The issue triggers an out-of-bounds memory access which causes oggenc to crash here (audio.c) : 576 memcpy(wav->channel_permute, wav_permute_matrix[wav->channels-1], 577 sizeof(int) * wav->channels); Tests were performed using vorbis-tools 1.4.0 References: https://trac.xiph.org/attachment/ticket/2136/crash_ex.wav (reproducer) http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9639 http://seclists.org/oss-sec/2015/q1/220 http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-9639.html
bugbot adjusting priority
The fix is found in https://bugzilla.novell.com/show_bug.cgi?id=914439#c3
The fix packages have been submitted as a fix for bnc#914439.
This is an autogenerated message for OBS integration: This bug (914441) was mentioned in https://build.opensuse.org/request/show/289678 13.2 / vorbis-tools https://build.opensuse.org/request/show/289679 13.1 / vorbis-tools
openSUSE-SU-2015:0522-1: An update that fixes two vulnerabilities is now available. Category: security (moderate) Bug References: 914439,914441 CVE References: CVE-2014-9638,CVE-2014-9639 Sources used: openSUSE 13.2 (src): vorbis-tools-1.4.0-17.8.1 openSUSE 13.1 (src): vorbis-tools-1.4.0-14.16.1
SUSE-SU-2015:1014-1: An update that fixes two vulnerabilities is now available. Category: security (moderate) Bug References: 914439,914441 CVE References: CVE-2014-9638,CVE-2014-9639 Sources used: SUSE Linux Enterprise Server 12 (src): vorbis-tools-1.4.0-23.1 SUSE Linux Enterprise Desktop 12 (src): vorbis-tools-1.4.0-23.1
An update workflow for this issue was started. This issue was rated as moderate. Please submit fixed packages until 2015-10-21. When done, reassign the bug to security-team@suse.de. https://swamp.suse.de/webswamp/wf/62305
SUSE-SU-2015:1775-1: An update that fixes three vulnerabilities is now available. Category: security (moderate) Bug References: 914439,914441,943795 CVE References: CVE-2014-9638,CVE-2014-9639,CVE-2015-6749 Sources used: SUSE Linux Enterprise Desktop 11-SP4 (src): vorbis-tools-1.1.1-174.1 SUSE Linux Enterprise Desktop 11-SP3 (src): vorbis-tools-1.1.1-174.1 SUSE Linux Enterprise Debuginfo 11-SP4 (src): vorbis-tools-1.1.1-174.1 SUSE Linux Enterprise Debuginfo 11-SP3 (src): vorbis-tools-1.1.1-174.1
fixed and released.