Описание
The next_text function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote attackers to cause a denial of service (buffer over-read) via a crafted mp3 file.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| mpg123 | fixed | 1.25.4-1 | package | |
| mpg123 | no-dsa | stretch | package | |
| mpg123 | no-dsa | jessie | package | |
| mpg123 | no-dsa | wheezy | package |
Примечания
http://seclists.org/fulldisclosure/2017/Jul/65
Связанные уязвимости
CVSS3: 5.5
ubuntu
больше 9 лет назад
The next_text function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote attackers to cause a denial of service (buffer over-read) via a crafted mp3 file.
CVSS3: 5.5
nvd
больше 9 лет назад
The next_text function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote attackers to cause a denial of service (buffer over-read) via a crafted mp3 file.
CVSS3: 5.5
github
больше 4 лет назад
The next_text function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote attackers to cause a denial of service (buffer over-read) via a crafted mp3 file.
CVSS3: 5.5
altlinux
больше 9 лет назад
ALT-PU-2017-1672: package `mpg123` update to version 1.25.0-alt1