All errata/sisyphus/ALT-PU-2019-4198-1
ALT-PU-2019-4198-1

Package update libexempi in branch sisyphus

Version2.5.1-alt1
Published2019-08-06
Max severityMEDIUM
Severity:

Closed issues (3)

BDU:2024-06662
MEDIUM6.5

Уязвимость функции ID3_Support::ID3v2Frame::getFrameValue утилиты exempi, позволяющая нарушителю вызвать отказ в обслуживании

Published: 2024-09-03
CVSS 3.xMEDIUM 6.5
CVSS:3.x/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0HIGH 7.8
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:C
References
CVE-2020-18651
MEDIUM6.5

Buffer Overflow vulnerability in function ID3_Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted audio file with ID3V2 frame.

Published: 2023-08-22Modified: 2024-11-21
CVSS 3.xMEDIUM 6.5
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVE-2020-18652
MEDIUM6.5

Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file.

Published: 2023-08-22Modified: 2024-11-21
CVSS 3.xMEDIUM 6.5
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H