Lucene search
+L

1686 matches found

CNVD
CNVD
•added 2021/11/11 12:00 a.m.•26 views

Speex Dezero Error Vulnerability

Speex is an open source audio codec. version 1.2 of Speex is vulnerable to a divide by zero error in the static int readsamples function. An attacker can exploit the vulnerability to cause a denial of service via a specially crafted WAV file...

5.5CVSS4.5AI score0.01011EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2021/11/11 12:00 a.m.•22 views

Mozilla Firefox Security Advisory (MFSA2014-17) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

8.8CVSS9.3AI score0.02826EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
•added 2021/11/11 12:00 a.m.•33 views

EulerOS 2.0 SP9 : libsndfile (EulerOS-SA-2021-2690)

According to the versions of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV...

8.8CVSS8.5AI score0.03163EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2021/11/11 12:00 a.m.•23 views

EulerOS 2.0 SP9 : libsndfile (EulerOS-SA-2021-2715)

According to the versions of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV...

8.8CVSS8.5AI score0.03163EPSS
SaveExploits1References2
NVD
NVD
•added 2021/11/10 10:15 p.m.•32 views

CVE-2020-23904

A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file. NOTE: the vendor states "I cannot reproduce it" and it "is a demo program...

5.5CVSS0.00719EPSS
SaveExploits1References1
OSV
OSV
•added 2021/11/10 10:15 p.m.•31 views

CVE-2020-23903

A Divide by Zero vulnerability in the function static int readsamples of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file...

5.5CVSS6.3AI score
SaveExploits0References3
OSV
OSV
•added 2021/11/10 10:15 p.m.•11 views

CVE-2020-23904

A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file. NOTE: the vendor states "I cannot reproduce it" and it "is a demo program...

5.5CVSS6.9AI score
SaveExploits0References1
NVD
NVD
•added 2021/11/10 10:15 p.m.•15 views

CVE-2020-23903

A Divide by Zero vulnerability in the function static int readsamples of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file...

5.5CVSS0.01011EPSS
SaveExploits1References3
osv-debian
osv-debian
•added 2021/11/10 10:15 p.m.•5 views

DEBIAN-CVE-2020-23903

A Divide by Zero vulnerability in the function static int readsamples of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file...

5.5CVSS5.9AI score0.01011EPSS
SaveExploits1References1
Prion
Prion
•added 2021/11/10 10:15 p.m.•26 views

Stack overflow

A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file. NOTE: the vendor states "I cannot reproduce it" and it "is a demo program...

4.3CVSS5.5AI score0.00719EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
•added 2021/11/10 10:15 p.m.•28 views

CVE-2020-23904

A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file. NOTE: the vendor states "I cannot reproduce it" and it "is a demo program...

5.5CVSS6.2AI score0.00719EPSS
SaveExploits1References2
Prion
Prion
•added 2021/11/10 10:15 p.m.•26 views

Design/Logic Flaw

A Divide by Zero vulnerability in the function static int readsamples of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file...

4.3CVSS5AI score0.01011EPSS
SaveExploits1References3Affected Software2
UbuntuCve
UbuntuCve
•added 2021/11/10 10:15 p.m.•35 views

CVE-2020-23903

A Divide by Zero vulnerability in the function static int readsamples of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file...

5.5CVSS6.4AI score0.01011EPSS
SaveExploits1References3
CVE
CVE
•added 2021/11/10 9:26 p.m.•87 views

CVE-2020-23904

CVE-2020-23904 affects Speex v1.2, with a stack-based buffer overflow in speexenc.c triggered by a crafted WAV file. The vulnerability can lead to a denial of service. The vendor notes inability to reproduce it and describes Speex as a demo program, which implies limited or unverified exploit pra...

5.5CVSS5.4AI score0.00719EPSS
SaveExploits1References1Affected Software1
Debian CVE
Debian CVE
•added 2021/11/10 9:26 p.m.•48 views

CVE-2020-23904

Removed by vendor...

5.5CVSS5.5AI score0.00719EPSS
SaveExploits1
Cvelist
Cvelist
•added 2021/11/10 9:26 p.m.•31 views

CVE-2020-23903

A Divide by Zero vulnerability in the function static int readsamples of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file...

5.1AI score0.01011EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2021/11/10 9:26 p.m.•32 views

CVE-2020-23903

A Divide by Zero vulnerability in the function static int readsamples of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file...

5.5CVSS5.2AI score0.01011EPSS
SaveExploits1
Mend
Mend
•added 2021/11/10 9:26 p.m.•1 views

CVE-2020-23903

A Divide by Zero vulnerability in the function static int readsamples of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file...

6.8CVSS0.01011EPSS
SaveExploits1References8
CVE
CVE
•added 2021/11/10 9:26 p.m.•279 views

CVE-2020-23903

CVE-2020-23903 is a divide-by-zero DoS in Speex v1.2 (function read_samples) exploitable via a crafted WAV file. Connected docs confirm the vulnerability, its impact (DoS/crash), and mitigations such as patched releases (e.g., IBM Cloud Pak components at 5.0.1, AlmaLinux patch ALSA-2022-7979, Mag...

5.5CVSS5AI score0.01011EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2021/11/10 12:00 a.m.•18 views

Speex 缓冲区错误漏洞

Speex is a free software proprietary audio compression format designed for speech. Speex v1.2 contains a security vulnerability that could be exploited by an attacker to cause a denial of service DoS via a crafted WAV file...

5.5CVSS5.6AI score0.00719EPSS
SaveExploits1References2
Rows per page
Query Builder