Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3qq6-672j-jx3v

Опубликовано: 29 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service (DoS).

id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service (DoS).

EPSS

Процентиль: 52%
0.00286
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 3.3
redhat
больше 20 лет назад

id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service (DoS).

CVSS3: 7.5
nvd
больше 7 лет назад

id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service (DoS).

CVSS3: 7.5
msrc
3 месяца назад

Описание отсутствует

CVSS3: 7.5
debian
больше 7 лет назад

id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b mispar ...

suse-cvrf
больше 7 лет назад

Security update for libid3tag

EPSS

Процентиль: 52%
0.00286
Низкий

7.5 High

CVSS3