CVE-2017-15185
MEDIUM5.0EPSS 0.20%發布日:2017/10/9修改日:2026/4/28
也稱為:DEBIAN-CVE-2017-15185
描述
plugins/ogg.c in Libmp3splt 0.9.2 calls the libvorbis vorbis_block_clear function with uninitialized data upon detection of invalid input, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
受影響套件(1)
- Debian/mp3spltfrom 0, < 2.6.2+20170630-2
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM5.0 | CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H |