CVE-2020-23903
Fixed in a distro release EPSS 1%
A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.
Products: xiph speex, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 9 | speex | 1.2.0-11.el9 |
| AlmaLinux 9 | speex-devel | 1.2.0-11.el9 |
| Arch Linux | speex | 1.2.1-1 |
| Debian 12 | speex | 1.2~rc1.2-2 |
| Debian 13 | speex | 1.2~rc1.2-2 |
| Debian 14 | speex | 1.2~rc1.2-2 |
| Red Hat Enterprise Linux 9 | speex | 0:1.2.0-11.el9 |
| Red Hat Enterprise Linux 9 | speex-debuginfo | 0:1.2.0-11.el9 |
| Red Hat Enterprise Linux 9 | speex-debugsource | 0:1.2.0-11.el9 |
| Red Hat Enterprise Linux 9 | speex-devel | 0:1.2.0-11.el9 |
| Red Hat Enterprise Linux 9 | speex-tools-debuginfo | 0:1.2.0-11.el9 |
| Rocky Linux 9 | speex | 0:1.2.0-11.el9 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | speex | 1.2-3.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | speex | 1.2-3.3.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP2 | speex | 1.2-3.3.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP3 | speex | 1.2-3.3.1 |
| SUSE Linux Enterprise Server 12 SP5 | speex | 1.1.999_1.2rc1-24.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | speex | 1.1.999_1.2rc1-24.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | speex | 1.1.999_1.2rc1-24.3.1 |
| Ubuntu 18.04 LTS | speex | 1.2~rc1.2-1ubuntu2.1 |
| Ubuntu 20.04 LTS | speex | 1.2~rc1.2-1.1ubuntu1.20.04.1 |
| Ubuntu 22.04 LTS | speex | 1.2~rc1.2-1.1ubuntu3 |
| Ubuntu Pro 16.04 LTS | speex | 1.2~rc1.2-1ubuntu1+esm1 |
| openSUSE Leap 15.2 | speex | 1.2-lp152.4.3.1 |
| openSUSE Leap 15.3 | speex | 1.2-3.3.1 |
| openSUSE Tumbleweed | speex | 1.2-2.1 |