Skip to main content

Libid3Tag

2 CVEs product

Monthly

CVE-2017-11551 MEDIUM This Month

The id3_field_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (OOM) via a crafted MP3 file. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Libid3Tag
NVD
CVSS 3.0
5.5
EPSS
0.7%
CVE-2017-11550 MEDIUM This Month

The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference and application crash) via a crafted mp3 file. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Null Pointer Dereference Denial Of Service Libid3Tag
NVD
CVSS 3.0
5.5
EPSS
0.4%
EPSS 1% CVSS 5.5
MEDIUM This Month

The id3_field_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (OOM) via a crafted MP3 file. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Libid3Tag
NVD
EPSS 0% CVSS 5.5
MEDIUM This Month

The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference and application crash) via a crafted mp3 file. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Null Pointer Dereference Denial Of Service Libid3Tag
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy