Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2017-11126
HistoryJul 10, 2017 - 3:29 a.m.

CVE-2017-11126

2017-07-1003:29:00
Alpine Linux Development Team
security.alpinelinux.org
9

0.001 Low

EPSS

Percentile

48.0%

The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file that is mishandled in the code for the “block_type != 2” case, a similar issue to CVE-2017-9870.

OSVersionArchitecturePackageVersionFilename
Alpine3.3-mainnoarchmpg123< 1.25.4-r0UNKNOWN
Alpine3.4-mainnoarchmpg123< 1.25.4-r0UNKNOWN
Alpine3.5-mainnoarchmpg123< 1.25.4-r0UNKNOWN
Alpine3.6-mainnoarchmpg123< 1.25.4-r0UNKNOWN