İçeriğe atla
Noroxi

xiph kayıtları

xiph üreticisine ait 17 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%82,4
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 21
  4. 23
  5. 24
  6. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

17 kayıt
  • CVE-2018-18820
    47Planlayın

    A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4.

    YüksekCVSS 8,1Kavram kanıtıEPSS %49

    xiph · icecast5 Kas 2018

  • CVE-2024-56431
    40Planlayın

    oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift.

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    xiph · theora25 Ara 2024

  • CVE-2008-1686
    39İzleyin

    Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters a

    KritikCVSS 9,3İstismar yokEPSS %6

    xine · xine-lib8 Nis 2008

  • CVE-2007-1344
    39İzleyin

    Multiple buffer overflows in src/ezstream.c in Ezstream before 0.3.0 allow remote attackers to execute arbitrary code via a crafted XML conf

    KritikCVSS 9,3İstismar yokEPSS %6

    xiph · icecast ezstream8 Mar 2007

  • CVE-2023-43361
    31İzleyin

    Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during

    YüksekCVSS 7,8İstismar yokEPSS %0

    xiph · vorbis-tools2 Eki 2023

  • CVE-2022-47021
    31İzleyin

    A null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows at

    YüksekCVSS 7,8İstismar yokEPSS %0

    xiph · opusfile20 Oca 2023

  • CVE-2026-5673
    28İzleyin

    Libtheora: libtheora: denial of service or information disclosure via malformed avi file processing

    YüksekCVSS 7,1İstismar yokEPSS %0

    xiph · theora6 Nis 2026

  • CVE-2017-11548
    23İzleyin

    The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service (memory corruption

    OrtaCVSS 5,5Kavram kanıtıEPSS %4

    xiph · libao31 Tem 2017

  • CVE-2017-11331
    23İzleyin

    The wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (memory allocati

    OrtaCVSS 5,5Kavram kanıtıEPSS %4

    xiph · vorbis-tools31 Tem 2017

  • CVE-2020-23903
    22İzleyin

    A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via

    OrtaCVSS 5,5İstismar yokEPSS %1

    xiph · speex10 Kas 2021

  • CVE-2020-23904
    22İzleyin

    A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.

    OrtaCVSS 5,5İstismar yokEPSS %1

    xiph · speex10 Kas 2021

  • CVE-2015-3026
    21İzleyin

    Icecast before 2.4.2, when a stream_auth handler is defined for URL authentication, allows remote attackers to cause a denial of service (NU

    OrtaCVSS 5,0İstismar yokEPSS %4

    xiph · icecast29 Nis 2015

  • CVE-2014-9638
    21İzleyin

    oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the n

    OrtaCVSS 5,0İstismar yokEPSS %4

    fedoraproject · fedora23 Oca 2015

  • CVE-2014-9639
    21İzleyin

    Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (crash) via a crafted number of channe

    OrtaCVSS 5,0İstismar yokEPSS %4

    xiph · vorbis-tools23 Oca 2015

  • CVE-2014-9640
    21İzleyin

    oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted raw file.

    OrtaCVSS 5,0İstismar yokEPSS %3

    xiph · vorbis-tools23 Oca 2015

  • CVE-2011-4612
    21İzleyin

    icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc (error.log) via a crafted URL.

    OrtaCVSS 5,0İstismar yokEPSS %2

    xiph · icecast19 Kas 2012

  • CVE-2015-6749
    18İzleyin

    Buffer overflow in the aiff_open function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to cause a denial of s

    OrtaCVSS 4,3İstismar yokEPSS %4

    xiph · vorbis-tools21 Eyl 2015