Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mfqq-9fqv-736q

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file that is mishandled in the code for the "block_type != 2" case, a similar issue to CVE-2017-9870.

The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file that is mishandled in the code for the "block_type != 2" case, a similar issue to CVE-2017-9870.

EPSS

Процентиль: 72%
0.01371
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 9 лет назад

The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file that is mishandled in the code for the "block_type != 2" case, a similar issue to CVE-2017-9870.

CVSS3: 5.5
nvd
больше 9 лет назад

The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file that is mishandled in the code for the "block_type != 2" case, a similar issue to CVE-2017-9870.

CVSS3: 5.5
debian
больше 9 лет назад

The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25 ...

CVSS3: 5.5
altlinux
больше 9 лет назад

ALT-PU-2017-1861: package `mpg123` update to version 1.25.2-alt1

EPSS

Процентиль: 72%
0.01371
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-125