REDHAT-BUG-2235669: Buffer Overflow
Buffer Overflow vulnerability in function ID3Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted audio file with ID3V2 frame.
https://gitlab.freedesktop.org/libopenraw/exempi/issues/13 https://gitlab.freedesktop.org/libopenraw/exempi/commit/fdd4765a699f9700850098b43b9798b933acb32f
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2235669?
The severity of REDHAT-BUG-2235669 is categorized as high due to its potential to cause denial of service.
How do I fix REDHAT-BUG-2235669?
To fix REDHAT-BUG-2235669, update exempi to version 2.5.1 or later.
What systems are affected by REDHAT-BUG-2235669?
REDHAT-BUG-2235669 affects all versions of exempi up to 2.5.0.
What causes the vulnerability in REDHAT-BUG-2235669?
The vulnerability in REDHAT-BUG-2235669 is caused by a buffer overflow in the ID3v2Frame handling of crafted audio files.
Can REDHAT-BUG-2235669 be exploited by remote attackers?
Yes, REDHAT-BUG-2235669 can be exploited by remote attackers through specially crafted audio files.