Wind River Support Network

HomeDefectsLIN8-7341

Acknowledged

LIN8-7341 : Security Advisory - libid3tag - CVE-2017-11551

Created: Aug 11, 2017 Updated: May 29, 2018

Found In Version: 8.0.0.20

Severity: Standard

Applicable for: Wind River Linux 8

Component/s: Userspace

Description

The id3_field_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (OOM) via a crafted MP3 file.

https://nvd.nist.gov/vuln/detail/CVE-2017-11551

CVEs

CVE-2017-11551