PatchTheCVEogg video tools vulnerabilities and fixes
Recent CVEs affecting ogg video tools, with upgrade or downgrade steps. 3 tracked.
Also searched as: oggvideotools.
ogg video tools has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-08-22. Highest priority: CVE-2020-21722 (score 46/100).
- CVE-2020-21724 HIGH 7.8 DOWNGRADE Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 a
- CVE-2020-21723 MEDIUM 5.5 DOWNGRADE A Segmentation Fault issue discovered StreamSerializer::extractStreams function in streamSerializer.cpp in ogg
- CVE-2020-21722 HIGH 7.8 DOWNGRADE Buffer Overflow vulnerability in oggvideotools 0.9.1 allows remote attackers to run arbitrary code via opening
FAQ
How do I fix ogg video tools vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ogg video tools being exploited right now?
None of the tracked ogg video tools CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ogg video tools CVE should I patch first?
CVE-2020-21722 currently ranks highest (46/100): Buffer Overflow vulnerability in oggvideotools 0.9.1 allows remote attackers to run arbitrary code via opening.