Lucene search
K

15 matches found

CNNVD
CNNVD
added 2024/07/10 12:0 a.m.2 views

opus security breach

opus is an open source native binding to libopus v1.3 by discord.js. A security vulnerability exists in opus that stems from supplying input objects with the toString attribute to several different functions, making it susceptible to denial of service DoS attacks...

7.5CVSS6.7AI score0.00222EPSS
Exploits0References4
OSV
OSV
added 2024/06/15 12:0 a.m.4 views

OPENSUSE-SU-2024:11132-1 libopus-devel-1.3.1-3.8 on GA media

These are all security issues fixed in the libopus-devel-1.3.1-3.8 package on the GA media of openSUSE Tumbleweed...

9.3CVSS7.7AI score0.00152EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 4:53 a.m.0 views

SUSE CVE-2017-0381

An information disclosure vulnerability in silk/NLSFstabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product:...

7.8CVSS5.8AI score0.00152EPSS
Exploits0References5
Snyk
Snyk
added 2022/02/16 1:10 p.m.1 views

Denial of Service (DoS)

Overview @discordjs/opus is a native bindings to libopus. Affected versions of this package are vulnerable to Denial of Service DoS when trying to encode using an encoder with zero channels, or a non-initialized buffer. This leads to a hard crash. PoC // Zero channels: javascript const OpusEncode...

7.5CVSS6.9AI score0.00433EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2020/09/28 12:0 a.m.22 views

EulerOS 2.0 SP3 : opus (EulerOS-SA-2020-2071)

According to the version of the opus package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An information disclosure vulnerability in silk/NLSFstabilize.c in libopus in Mediaserver could enable a local malicious application to access data...

9.3CVSS7.5AI score0.00152EPSS
Exploits0References2
Veracode
Veracode
added 2017/01/31 3:27 a.m.18 views

Denial Of Service (DoS) Or Remote Code Execution (RCE)

libopus is vulnerable to remote code execution or denial of service attacks. The vulnerability exists because silk/NLSFstabilize.c does not properly validate the negative input when computing a minimum distance...

9.3CVSS7.9AI score0.00152EPSS
Exploits0References10Affected Software1
Mageia
Mageia
added 2017/01/29 8:53 p.m.56 views

Updated opus packages fix security vulnerability

A remote code execution vulnerability in silk/NLSFstabilize.c in libopus could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing CVE-2017-0381...

9.3CVSS4AI score0.00152EPSS
Exploits0References2
OSV
OSV
added 2017/01/29 8:53 p.m.4 views

MGASA-2017-0029 Updated opus packages fix security vulnerability

A remote code execution vulnerability in silk/NLSFstabilize.c in libopus could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing CVE-2017-0381...

9.3CVSS8AI score0.00152EPSS
Exploits0References3
NVD
NVD
added 2017/01/12 8:59 p.m.12 views

CVE-2017-0381

An information disclosure vulnerability in silk/NLSFstabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product:...

9.3CVSS6.5AI score0.00152EPSS
Exploits0References9
OSV
OSV
added 2017/01/12 8:59 p.m.0 views

DEBIAN-CVE-2017-0381

An information disclosure vulnerability in silk/NLSFstabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product:...

7.8CVSS5.8AI score0.00152EPSS
Exploits0References1
OSV
OSV
added 2017/01/12 8:59 p.m.2 views

CVE-2017-0381

An information disclosure vulnerability in silk/NLSFstabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product:...

7.8CVSS6.4AI score
Exploits0References9
OSV
OSV
added 2017/01/12 8:59 p.m.0 views

UBUNTU-CVE-2017-0381

An information disclosure vulnerability in silk/NLSFstabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product:...

7.8CVSS7.1AI score0.00152EPSS
Exploits0References4
Prion
Prion
added 2017/01/12 8:59 p.m.12 views

Information disclosure

An information disclosure vulnerability in silk/NLSFstabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product:...

9.3CVSS6.3AI score0.00152EPSS
Exploits0References9Affected Software1
CVE
CVE
added 2017/01/12 8:0 p.m.92 views

CVE-2017-0381

CVE-2017-0381 is an information-disclosure vulnerability in silk/NLSF_stabilize.c within libopus used by Mediaserver, affecting Android versions 5.0.2–7.1. It could allow a local malicious app to access data outside its permissions. The concrete root: a flaw in Opus handling as described in the C...

9.3CVSS6.3AI score0.00152EPSS
Exploits0References9Affected Software1
Cvelist
Cvelist
added 2017/01/12 8:0 p.m.18 views

CVE-2017-0381

An information disclosure vulnerability in silk/NLSFstabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product:...

6.5AI score0.00152EPSS
Exploits0References9
Rows per page
Query Builder