Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-34085
HistoryMay 11, 2022 - 12:00 a.m.

CVE-2021-34085

2022-05-1100:00:00
ubuntu.com
ubuntu.com
12
cve-2021-34085
mpglibdbl
layer3
remote attackers
denial of service
application crash
unspecified impact
vulnerability
cve-2017-9872
cve-2017-14409
cve-2018-10778
unix

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.015

Percentile

87.3%

Read access violation in the III_dequantize_sample function in
mpglibDBL/layer3.c in mp3gain through 1.5.2-r2 allows remote attackers to
cause a denial of service (application crash) or possibly have unspecified
other impact, a different vulnerability than CVE-2017-9872. CVE-2017-14409,
and CVE-2018-10778.

OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchmp3gain< anyUNKNOWN
ubuntu24.04noarchmp3gain< anyUNKNOWN

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.015

Percentile

87.3%