CVE:CVE-2017-14632
CNNVD:CNNVD-201709-1023
Xiph.Org libvorbis是一个开源的音频编码解码函数库，适用于固定或可变比特率的中高音质音频。
Xiph.Org libvorbis 1.3.5版本中存在缓冲区溢出漏洞。远程攻击者可利用该漏洞执行代码。
solution:Upgrade xiph.org libvorbis to a higher version than 1.3.5,and avoid the version 1.3.5; Upgrade debian debian_linux to a higher version than 7.0,9.0,and avoid the version 7.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,17.10,and avoid the version 14.04,16.04,17.10