Most recent entries from all

ALSA-2022:7979 — Low: speex security update

Affected: AlmaLinux:9: speex, AlmaLinux:9: speex-devel

Speex is a patent-free compression format designed especially for speech. It is specialized for voice communications at low bit-rates.

Security Fix(es):

* speex: divide by zero in read_samples() via crafted WAV file (CVE-2020-23903)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2025-16158

cnvd-2021-94910

EUVD-2026-44873

fkie_cve-2020-23903

A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.

GHSA-r85g-7qgq-6wrq

A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.

gsd-2020-23903

OESA-2022-1701 — speex security update

Affected: openEuler:20.03-LTS-SP1: speex, openEuler:20.03-LTS-SP3: speex, openEuler:22.03-LTS: speex

Speex is an Open Source/Free Software patent-free audio compression format designed for speech. The Speex Project aims to lower the barrier of entry for voice applications by providing a free alternative to expensive proprietary speech codecs. Moreover, Speex is well-adapted to Internet applications and provides useful features that are not present in most other codecs. Security Fix(es): A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.(CVE-2020-23903)

openSUSE-SU-2021:1538-1 — Security update for speex

Security update for speex

SUSE-SU-2021:3858-1 — Security update for speex

Security update for speex

UBUNTU-CVE-2020-23903

Affected: Ubuntu:Pro:16.04:LTS: speex, Ubuntu:18.04:LTS: speex, Ubuntu:20.04:LTS: speex, Ubuntu:22.04:LTS: speex

A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.

WID-SEC-W-2022-2052 — Mehrere Red Hat Enterprise Linux Pakete: Mehrere Schwachstellen

Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder sonstige Auswirkungen zu verursachen.