CVEDB API

bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 56.9%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2018-10393

Xiph.org » Libvorbis » Version: 1.3.6

cpe:2.3:a:xiph.org:libvorbis:1.3.6
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Redhat » Enterprise Linux » Version: 8.0

cpe:2.3:o:redhat:enterprise_linux:8.0
Redhat » Enterprise Linux Eus » Version: 8.1

cpe:2.3:o:redhat:enterprise_linux_eus:8.1
Redhat » Enterprise Linux Eus » Version: 8.2

cpe:2.3:o:redhat:enterprise_linux_eus:8.2
Redhat » Enterprise Linux Eus » Version: 8.4

cpe:2.3:o:redhat:enterprise_linux_eus:8.4
Redhat » Enterprise Linux Server Aus » Version: 8.2

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2
Redhat » Enterprise Linux Server Aus » Version: 8.4

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4
Redhat » Enterprise Linux Server Tus » Version: 8.2

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2
Redhat » Enterprise Linux Server Tus » Version: 8.4

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4