Vulnerabilities > CVE-2020-23903 - Divide By Zero vulnerability in multiple products

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

xiph

fedoraproject

CWE-369

NVD

Published: 2021-11-10

Updated: 2024-11-21

Summary

A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.

Vulnerable Configurations

Part	Description	Count
Application	Xiph Xiph Speex 1.2	1
OS	Fedoraproject Fedoraproject Fedora 34 Fedoraproject Fedora 35	2

Common Weakness Enumeration (CWE)

CWE-369 - Divide By Zero

References

https://github.com/xiph/speex/issues/13
https://github.com/xiph/speex/issues/13
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LXCRAYNW5ESCE2PIGTUXZNZHNYFLJ6PX/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LXCRAYNW5ESCE2PIGTUXZNZHNYFLJ6PX/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3SEV2ZRR47GSD3M7O5PH4XEJMKJJNG2/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3SEV2ZRR47GSD3M7O5PH4XEJMKJJNG2/