This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2020-23903 →
DEBIAN-CVE-2020-23903
A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted...
Original description
The description as published by the source.
A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
speex
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2~rc1.2-2"}]}]
Debian:13
speex
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2~rc1.2-2"}]}]
Debian:14
speex
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2~rc1.2-2"}]}]
References
- advisory security-tracker.debian.org