113 matches found
RHEL 6 : libid3tag (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libid3tag: Out of memory in id3fieldparse function in field.c CVE-2017-11551 - The id3ucs4length function...
RHEL 7 : libid3tag (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libid3tag: Out of memory in id3fieldparse function in field.c CVE-2017-11551 - The id3ucs4length function...
SUSE CVE-2004-2779
id3utf16deserialize in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service DoS...
SUSE CVE-2008-2109
field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service CPU consumption via an ID3FIELDTYPESTRINGLIST field that ends in '\0', which triggers an infinite loop...
SUSE CVE-2017-11551
The id3fieldparse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service OOM via a crafted MP3 file...
SUSE CVE-2017-11550
The id3ucs4length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service NULL Pointer Dereference and application crash via a crafted mp3 file...
Mageia: Security Advisory (MGASA-2018-0223)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 28 : mingw-libid3tag (2018-2926fd93f4)
Fix CVE-2017-11550 and CVE-2004-2779 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...
Fedora 28 : libid3tag (2018-d187b44f75)
Security fix for CVE-2004-2779 and CVE-2017-11550 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Denial Of Service (DoS)
libid3tag.so is vulnerable to denial of service DoS. The attack is possible when the attacker send a malicious file to id3fieldparse function in field.c, causing out-of-memory...
MGASA-2018-0223 Updated libid3tag packages fix security vulnerabilities
id3utf16deserialize in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service DoS. CVE-2004-2779 field.c in the libid3tag 0.15.0b library...
Updated libid3tag packages fix security vulnerabilities
id3utf16deserialize in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service DoS. CVE-2004-2779 field.c in the libid3tag 0.15.0b library...
Fedora Update for mingw-libid3tag FEDORA-2018-4e26c06aef
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 27 : mingw-libid3tag (2018-4e26c06aef)
Fix CVE-2017-11550 and CVE-2004-2779 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...
[SECURITY] Fedora 27 Update: mingw-libid3tag-0.15.1b-23.fc27
libid3tag is a library for reading and eventually writing ID3 tags, both ID3v1 and the various versions of ID3v2...
[SECURITY] Fedora 28 Update: mingw-libid3tag-0.15.1b-24.fc28
libid3tag is a library for reading and eventually writing ID3 tags, both ID3v1 and the various versions of ID3v2...
Fedora 27 : libid3tag (2018-e06468b832)
Security fix for CVE-2004-2779 and CVE-2017-11550 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora Update for libid3tag FEDORA-2018-e06468b832
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 27 Update: libid3tag-0.15.1b-26.fc27
libid3tag is a library for reading and eventually writing ID3 tags, both ID3v1 and the various versions of ID3v2...
[SECURITY] Fedora 28 Update: libid3tag-0.15.1b-28.fc28
libid3tag is a library for reading and eventually writing ID3 tags, both ID3v1 and the various versions of ID3v2...