RHEL 6 : speex (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - speex: stack-based buffer overflow in speexenc.c via a crafted WAV file CVE-2020-23904 - A Divide by Zero...

RHEL 7 : speex (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - speex: stack-based buffer overflow in speexenc.c via a crafted WAV file CVE-2020-23904 - A Divide by Zero...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Speex [CVE-2020-23903]

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Speex, caused by a divide-by-zero vulnerability in the function static int readsamples CVE-2020-23903. Speex is used in our Speech Services runtimes. This vulnerabilitiy has been...

CentOS 9 : speex-1.2.0-11.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the speex-1.2.0-11.el9 build changelog. - divide by zero in readsamples via crafted WAV file CVE-2020-23903 Note that Nessus has not tested for this issue but has instead relied only on the...

Rocky Linux 9 : speex (RLSA-2022:7979)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7979 advisory. - A Divide by Zero vulnerability in the function static int readsamples of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file...

Debian: Security Advisory (DSA-1585-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2008-1686

Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure...

SUSE CVE-2014-1542

Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate...

SUSE CVE-2020-23903

A Divide by Zero vulnerability in the function static int readsamples of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file...

SUSE CVE-2020-23904

A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file. NOTE: the vendor states "I cannot reproduce it" and it "is a demo program...

Oracle Linux 9 : speex (ELSA-2022-7979)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7979 advisory. - CVE-2020-23903 speex: divide by zero in readsamples via crafted WAV file Tenable has extracted the preceding description block directly from the Oracle Linux...

speex security update

1.2.0-11 - CVE-2020-23903 speex: divide by zero in readsamples via crafted WAV file - Resolves: CVE-2020-23903...

AlmaLinux 9 : speex (ALSA-2022:7979)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:7979 advisory. - A Divide by Zero vulnerability in the function static int readsamples of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file...

RHEL 9 : speex (RHSA-2022:7979)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7979 advisory. Speex is a patent-free compression format designed especially for speech. It is specialized for voice communications at low bit-rates. Security Fixes...

Low: Red Hat Security Advisory: speex security update

An update for speex is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

speex: divide by zero in read_samples() via crafted WAV file

A divide-by-zero flaw was found in speex within the readsamples at src/speexenc.c function. This flaw allows a malicious user to provide a crafted wav file and crash the speexenc utility, resulting in a denial of service. The highest threat from this vulnerability is to system availability...

speex security update

An update is available for speex. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Speex is a patent-free compression format designed especially for speech. It is...

RLSA-2022:7979 Low: speex security update

Speex is a patent-free compression format designed especially for speech. It is specialized for voice communications at low bit-rates. Security Fixes: speex: divide by zero in readsamples via crafted WAV file CVE-2020-23903 For more details about the security issues, including the impact, a CVSS...

ALSA-2022:7979 Low: speex security update

Speex is a patent-free compression format designed especially for speech. It is specialized for voice communications at low bit-rates. Security Fixes: speex: divide by zero in readsamples via crafted WAV file CVE-2020-23903 For more details about the security issues, including the impact, a CVSS...

Low: speex security update

Speex is a patent-free compression format designed especially for speech. It is specialized for voice communications at low bit-rates. Security Fixes: speex: divide by zero in readsamples via crafted WAV file CVE-2020-23903 For more details about the security issues, including the impact, a CVSS...