Vulnerability Details CVE-2017-15266
In GNU Libextractor 1.4, there is a Divide-By-Zero in EXTRACTOR_wav_extract_method in wav_extractor.c via a zero sample rate.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.3%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 4.3
References
- http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00002.html
- http://openwall.com/lists/oss-security/2017/10/11/1
- http://www.securityfocus.com/bid/101271
- https://bugzilla.redhat.com/show_bug.cgi?id=1499599
- https://lists.debian.org/debian-lts-announce/2017/12/msg00000.html
- http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00002.html
- http://openwall.com/lists/oss-security/2017/10/11/1
- http://www.securityfocus.com/bid/101271
- https://bugzilla.redhat.com/show_bug.cgi?id=1499599
- https://lists.debian.org/debian-lts-announce/2017/12/msg00000.html
Products affected by CVE-2017-15266
-
cpe:2.3:a:gnu:libextractor:1.4