Lucene search
+L

772 matches found

NVD
NVD
added 2021/11/10 10:15 p.m.22 views

CVE-2020-23904

A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file. NOTE: the vendor states "I cannot reproduce it" and it "is a demo program...

5.5CVSS0.00696EPSS
SaveExploits1References1
OSV
OSV
added 2021/11/10 10:15 p.m.7 views

CVE-2020-23904

A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file. NOTE: the vendor states "I cannot reproduce it" and it "is a demo program...

5.5CVSS6.9AI score
SaveExploits0References1
Prion
Prion
added 2021/11/10 10:15 p.m.23 views

Design/Logic Flaw

A Divide by Zero vulnerability in the function static int readsamples of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file...

4.3CVSS5AI score0.0094EPSS
SaveExploits1References3Affected Software2
UbuntuCve
UbuntuCve
added 2021/11/10 10:15 p.m.32 views

CVE-2020-23903

A Divide by Zero vulnerability in the function static int readsamples of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file...

5.5CVSS6.4AI score0.0094EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2021/11/10 10:15 p.m.25 views

CVE-2020-23904

A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file. NOTE: the vendor states "I cannot reproduce it" and it "is a demo program...

5.5CVSS6.2AI score0.00696EPSS
SaveExploits1References2
Prion
Prion
added 2021/11/10 10:15 p.m.20 views

Stack overflow

A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file. NOTE: the vendor states "I cannot reproduce it" and it "is a demo program...

4.3CVSS5.5AI score0.00696EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2021/11/10 9:26 p.m.79 views

CVE-2020-23904

CVE-2020-23904 affects Speex v1.2, with a stack-based buffer overflow in speexenc.c triggered by a crafted WAV file. The vulnerability can lead to a denial of service. The vendor notes inability to reproduce it and describes Speex as a demo program, which implies limited or unverified exploit pra...

5.5CVSS5.4AI score0.00696EPSS
SaveExploits1References1Affected Software1
Debian CVE
Debian CVE
added 2021/11/10 9:26 p.m.42 views

CVE-2020-23904

Removed by vendor...

5.5CVSS5.5AI score0.00696EPSS
SaveExploits1
Cvelist
Cvelist
added 2021/11/10 9:26 p.m.22 views

CVE-2020-23903

A Divide by Zero vulnerability in the function static int readsamples of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file...

5.1AI score0.0094EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2021/11/10 9:26 p.m.30 views

CVE-2020-23903

A Divide by Zero vulnerability in the function static int readsamples of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file...

5.5CVSS5.2AI score0.0094EPSS
SaveExploits1
CVE
CVE
added 2021/11/10 9:26 p.m.266 views

CVE-2020-23903

CVE-2020-23903 is a divide-by-zero DoS in Speex v1.2 (function read_samples) exploitable via a crafted WAV file. Connected docs confirm the vulnerability, its impact (DoS/crash), and mitigations such as patched releases (e.g., IBM Cloud Pak components at 5.0.1, AlmaLinux patch ALSA-2022-7979, Mag...

5.5CVSS5AI score0.0094EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2021/11/10 12:00 a.m.10 views

Speex 缓冲区错误漏洞

Speex is a free software proprietary audio compression format designed for speech. Speex v1.2 contains a security vulnerability that could be exploited by an attacker to cause a denial of service DoS via a crafted WAV file...

5.5CVSS5.6AI score0.00696EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2021/11/03 12:00 a.m.18 views

Huawei EulerOS: Security Advisory for libsndfile (EulerOS-SA-2021-2638)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.03292EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2021/10/26 12:00 a.m.21 views

Huawei EulerOS: Security Advisory for libsndfile (EulerOS-SA-2021-2592)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.03292EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2021/10/25 12:00 a.m.30 views

EulerOS 2.0 SP3 : libsndfile (EulerOS-SA-2021-2592)

According to the versions of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV...

8.8CVSS8.5AI score0.03292EPSS
SaveExploits1References2
Amazon
Amazon
added 2021/10/06 12:00 a.m.32 views

Important: libsndfile

Issue Overview: A heap buffer overflow flaw was found in libsndfile. This flaw allows an attacker to execute arbitrary code via a crafted WAV file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. CVE-2021-3246 Affected Packages:...

8.8CVSS8.8AI score0.03292EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2021/09/28 12:00 a.m.15 views

Huawei EulerOS: Security Advisory for libsndfile (EulerOS-SA-2021-2505)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.03292EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2021/09/27 12:00 a.m.25 views

EulerOS 2.0 SP5 : libsndfile (EulerOS-SA-2021-2505)

According to the versions of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV...

8.8CVSS8.5AI score0.03292EPSS
SaveExploits1References2
CNVD
CNVD
added 2021/09/22 12:00 a.m.21 views

SELA heap buffer overflow vulnerability

SELA is a lossless audio codec. a heap buffer overflow vulnerability exists in file::WavFile::writeToFile in wavfile.c in SELA 20200412 and earlier versions. No detailed vulnerability details are currently available...

7.8CVSS3.5AI score0.00764EPSS
SaveExploits1References1
OSV
OSV
added 2021/09/20 4:15 p.m.9 views

CVE-2021-39552

An issue was discovered in sela through 20200412. file::WavFile::readFromFile in wavfile.c has a heap-based buffer overflow...

7.8CVSS7.5AI score0.00764EPSS
SaveExploits1References1
Rows per page
Query Builder