Lucene search

K
redosRedosROS-20240807-02
HistoryAug 07, 2024 - 12:00 a.m.

ROS-20240807-02

2024-08-0700:00:00
redos.red-soft.ru
5
vulnerability
espeak
speech synthesizer
buffer overflow
denial of service
comparison errors
unix

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

7.2

Confidence

High

Vulnerability of CountVowelPosition() function of Espeak compact free software speech synthesizer is related to stack buffer overflow.
with a stack buffer overflow. Exploitation of the vulnerability could allow an attacker to cause a denial of
service

SetUpPhonemeTable() compact free software speech synthesizer Espeak vulnerability is related to
memory buffer overflow. Exploitation of the vulnerability could allow an attacker to cause a denial of
denial of service

Vulnerability in PeaksToHarmspect() function of Espeak compact free software speech synthesizer is related to
comparison errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service

ReadClause() compact free software speech synthesizer Espeak vulnerability is related to
Buffer copying without checking the size of the input data. Exploitation of the vulnerability could allow
an attacker to cause a denial of service

RemoveEnding() compact free software speech synthesizer Espeak vulnerability is related to
stack buffer overflow. Exploitation of the vulnerability could allow an attacker to cause a denial of
service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64espeak-ng< 1.51.1-1UNKNOWN

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

7.2

Confidence

High