CVE-2017-11333

CVE Database · CVE-2017-11333

CVE-2017-11333

· N/AModified

CVSS v3.1

N/A

EPSS

4.84%

Published

Jul 31, 2017

Modified

May 12, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBlibvorbis 1.3.5 - Multiple Vulnerabilities TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (OOM) via a crafted wav file.

Weaknesses (CWE)

CWE-476

Affected Products (1)

xiph.org · libvorbisvulnerable

References (8)

http://seclists.org/fulldisclosure/2017/Jul/82

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2018/04/msg00033.html

https://lists.debian.org/debian-lts-announce/2019/12/msg00021.html

https://www.exploit-db.com/exploits/42399/

http://seclists.org/fulldisclosure/2017/Jul/82

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2018/04/msg00033.html

https://lists.debian.org/debian-lts-announce/2019/12/msg00021.html

https://www.exploit-db.com/exploits/42399/

KEV Catalog EPSS Scores Vendors All CVEs