Описание
In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c, which may lead to DoS when playing a crafted audio file.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | libsndfile | Will not fix | ||
| Red Hat Enterprise Linux 7 | libsndfile | Will not fix | ||
| Red Hat Enterprise Linux 9 | libsndfile | Not affected |
Показывать по
10
Дополнительная информация
Статус:
Low
Дефект:
CWE-369
https://bugzilla.redhat.com/show_bug.cgi?id=1499982libsndfile: Divide-by-zero in the double64_init() function
EPSS
Процентиль: 78%
0.01154
Низкий
3.3 Low
CVSS3
Связанные уязвимости
CVSS3: 6.5
ubuntu
почти 8 лет назад
In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c, which may lead to DoS when playing a crafted audio file.
CVSS3: 6.5
nvd
почти 8 лет назад
In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c, which may lead to DoS when playing a crafted audio file.
CVSS3: 6.5
debian
почти 8 лет назад
In libsndfile 1.0.28, a divide-by-zero error exists in the function do ...
CVSS3: 6.5
github
около 3 лет назад
In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c, which may lead to DoS when playing a crafted audio file.
EPSS
Процентиль: 78%
0.01154
Низкий
3.3 Low
CVSS3