Lucene search
K

18 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2014-9448

Malware in sbrugna...

5CVSS5.3AI score0.01096EPSS
Exploits1References11
OSV
OSV
added 2025/09/05 5:20 p.m.1 views

CVE-2025-39690 iio: accel: sca3300: fix uninitialized iio scan data

In the Linux kernel, the following vulnerability has been resolved: iio: accel: sca3300: fix uninitialized iio scan data Fix potential leak of uninitialized stack data to userspace by ensuring that the channels array is zeroed before use...

5.5CVSS6.2AI score0.00027EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:24 a.m.1 views

SUSE CVE-2014-9638

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

5CVSS6.8AI score0.01096EPSS
Exploits1References6
SUSE CVE
SUSE CVE
added 2023/02/15 4:36 a.m.2 views

SUSE CVE-2017-18189

In the startread function in xa.c in Sound eXchange SoX through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service...

5.5CVSS6.4AI score0.05714EPSS
Exploits1References4
Veracode
Veracode
added 2022/06/21 6:23 a.m.18 views

Denial Of Service (DoS)

@discordjs/opus is vulnerable to denial of service. An attacker is able cause an application crash via sending crafted requests through an encoder with zero channels, or a non-initialized buffer...

7.5CVSS7AI score0.00433EPSS
Exploits1References6Affected Software1
NVD
NVD
added 2022/06/17 8:15 p.m.9 views

CVE-2022-25345

All versions of package @discordjs/opus are vulnerable to Denial of Service DoS when trying to encode using an encoder with zero channels, or a non-initialized buffer. This leads to a hard crash...

7.5CVSS0.00433EPSS
Exploits1References2
OSV
OSV
added 2022/06/17 8:15 p.m.1 views

ALPINE-CVE-2022-25345

All versions of package @discordjs/opus are vulnerable to Denial of Service DoS when trying to encode using an encoder with zero channels, or a non-initialized buffer. This leads to a hard crash...

7.5CVSS6.9AI score0.00433EPSS
Exploits1References1
AlpineLinux
AlpineLinux
added 2022/06/17 8:0 p.m.31 views

CVE-2022-25345

All versions of package @discordjs/opus are vulnerable to Denial of Service DoS when trying to encode using an encoder with zero channels, or a non-initialized buffer. This leads to a hard crash...

7.5CVSS7.5AI score0.00433EPSS
Exploits1
ATTACKERKB
ATTACKERKB
added 2022/06/17 8:0 p.m.0 views

CVE-2022-25345

All versions of package @discordjs/opus are vulnerable to Denial of Service DoS when trying to encode using an encoder with zero channels, or a non-initialized buffer. This leads to a hard crash...

7.5CVSS7AI score0.00433EPSS
Exploits1References3
Snyk
Snyk
added 2022/02/16 1:10 p.m.1 views

Denial of Service (DoS)

Overview @discordjs/opus is a native bindings to libopus. Affected versions of this package are vulnerable to Denial of Service DoS when trying to encode using an encoder with zero channels, or a non-initialized buffer. This leads to a hard crash. PoC // Zero channels: javascript const OpusEncode...

7.5CVSS6.9AI score0.00433EPSS
Exploits1References2
OSV
OSV
added 2018/03/01 5:29 a.m.0 views

UBUNTU-CVE-2017-18207

The Waveread.readfmtchunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service divide-by-zero and exception via a crafted wav format audio file. NOTE: the vendor disputes this issue because Python applications...

6.5CVSS6.7AI score0.00475EPSS
Exploits0References3
OSV
OSV
added 2018/02/15 10:29 a.m.1 views

DEBIAN-CVE-2017-18189

In the startread function in xa.c in Sound eXchange SoX through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service...

7.5CVSS6.2AI score0.05714EPSS
Exploits1References1
OSV
OSV
added 2015/01/23 3:59 p.m.1 views

DEBIAN-CVE-2014-9638

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

5CVSS6.8AI score0.01096EPSS
Exploits1References1
OSV
OSV
added 2015/01/23 3:59 p.m.1 views

AZL-7400 CVE-2014-9638 affecting package vorbis-tools for versions less than 1.4.0-35

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

5CVSS6.1AI score0.01096EPSS
Exploits1References1
OSV
OSV
added 2015/01/23 3:59 p.m.2 views

AZL-6952 CVE-2014-9638 affecting package vorbis-tools for versions less than 1.4.0-35

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

5CVSS6.1AI score0.01096EPSS
Exploits1References1
OSV
OSV
added 2015/01/23 3:59 p.m.0 views

UBUNTU-CVE-2014-9638

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

5CVSS6.1AI score0.01096EPSS
Exploits1References2
UbuntuCve
UbuntuCve
added 2015/01/23 3:59 p.m.16 views

CVE-2014-9638

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

5CVSS6.1AI score0.01096EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2015/01/23 3:0 p.m.16 views

CVE-2014-9638

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

5CVSS5.4AI score0.01096EPSS
Exploits1
Rows per page
Query Builder