Red Hat Security Advisory

RHSA-2022:7979

speex security update

Released 2022-11-15 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 9) speex-devel-1.2.0-11.el9
Red Hat Enterprise Linux AppStream (v. 9) speex-1.2.0-11.el9

Fixes 1 record

TI-2020-14721 CVE-2020-23903 · GHSA-r85g-7qgq-6wrq

A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2…

LOW 27

A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01011 Published 2021-11-10 Partial fix CWE-369