Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2020-3080

Высокий

ALT-PU-2020-3080: package libid3tag update to version 0.15.1b-alt9

Источник
errata.altlinux.org
Дата публикации
19.10.2020
Дата обновления
19.10.2020
Устраненные уязвимости
1

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades libid3tag to version 0.15.1b-alt9.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 3.3
redhat
почти 22 года назад

id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service (DoS).

CVSS3: 7.5
nvd
больше 8 лет назад

id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service (DoS).

CVSS3: 7.5
msrc
больше 1 года назад

id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service (DoS).

CVSS3: 7.5
debian
больше 8 лет назад

id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b mispar ...

CVSS3: 7.5
github
больше 4 лет назад

id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service (DoS).