All errata/c9f2/ALT-PU-2023-2082-1
ALT-PU-2023-2082-1

Package update libid3tag in branch c9f2

Version0.15.1b-alt10
Published2023-06-27
Max severityHIGH
Severity:

Closed issues (1)

CVE-2004-2779
HIGH7.5

id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service (DoS).

Published: 2018-02-20Modified: 2024-11-20
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS 3.xHIGH 7.5
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H