ALT-PU-2024-1600-1

Package update libid3tag in branch sisyphus_loongarch64

Version0.16.3-alt1
Task#0
Published2024-01-30
Max severityHIGH
Severity:

Closed issues (3)

CVE-2004-2779
HIGH7.5

id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service (DoS).

Published: 2018-02-20Modified: 2024-11-20
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS 3.xHIGH 7.5
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H