[{"CVE":"CVE-2017-11331","severity":"low","public_date":"2017-07-30T00:00:00Z","advisories":[],"bugzilla":"1480656","bugzilla_description":"CVE-2017-11331 vorbis-tools: Invalid memory allocation in wav_open function in oggenc/audio.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11331.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-6749","severity":"low","public_date":"2015-08-30T00:00:00Z","advisories":[],"bugzilla":"1258443","bugzilla_description":"CVE-2015-6749 vorbis-tools: invalid AIFF file causes alloca() buffer overflow","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6749.json"},{"CVE":"CVE-2014-9638","severity":"low","public_date":"2015-01-18T00:00:00Z","advisories":[],"bugzilla":"1184448","bugzilla_description":"CVE-2014-9638 vorbis-tools: division by zero on crafted WAV file","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9638.json"},{"CVE":"CVE-2014-9639","severity":"low","public_date":"2015-01-18T00:00:00Z","advisories":[],"bugzilla":"1184449","bugzilla_description":"CVE-2014-9639 vorbis-tools: integer overflow on crafted WAV file","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9639.json"},{"CVE":"CVE-2014-9640","severity":"low","public_date":"2014-06-20T00:00:00Z","advisories":[],"bugzilla":"1185272","bugzilla_description":"CVE-2014-9640 vorbis-tools: segfault when trying to encode trivial raw input","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9640.json"}]