CVE-2017-11549

2017-07-3113:00:00

mitre

www.cve.org

5.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.5%

JSON

The play_midi function in playmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mid file. NOTE: CPU consumption might be relevant when using the --background option.

References

seclists.org/fulldisclosure/2017/Jul/83