PT-2017-11435

CVE-2017-10683

·

Published

2017-06-29

·

Updated

2024-06-15

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions mpg123 version 1.25.0
Description The issue is related to a heap-based buffer over-read in the convert latin1 function, located in libmpg123/id3.c. This can be triggered by a crafted input, potentially leading to a remote denial of service attack.
Recommendations For mpg123 version 1.25.0, consider updating to a newer version that contains a fix for this issue, as no specific workaround is provided for this version.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2017-1821
DLA-1017-1
OPENSUSE-SU-2024:11061-1
Found an issue in the description? Have something to add? Feel free to write us 👾