Описание
Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c.
A flaw was found in the espeak-ng package. A local attacker can use a specially crafted payload to trigger a floating point exception error, which may lead to a denial of service.
Отчет
The Floating Point Exception discovered in espeak-ng within the PeaksToHarmspect function in wavegen.c is assessed as a low severity issue due to its limited impact and mitigating factors. Primarily, the occurrence of Floating Point Exceptions typically arises from non-standard floating-point operations, often involving division by zero or invalid arithmetic operations. However, these exceptions commonly trigger robust error handling mechanisms inherent in modern operating systems and programming environments, preventing program crashes or security vulnerabilities. Furthermore, the specific context of the issue within the PeaksToHarmspect function suggests its occurrence within a particular computational routine for generating waveforms, likely constrained to specific usage scenarios and input conditions. Consequently, its impact is localized and may not manifest in typical usage scenarios or pose significant risks to system stability or security.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 8 | espeak-ng | Fix deferred | ||
| Red Hat Enterprise Linux 9 | espeak-ng | Fix deferred |
Показывать по
Дополнительная информация
Статус:
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c.
Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c.
Espeak-ng 1.52-dev was discovered to contain a Floating Point Exceptio ...
Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c.
EPSS
5.5 Medium
CVSS3