vulnerability

Red Hat: CVE-2020-23903: CVE-2020-23903 speex: divide by zero in read_samples() via crafted WAV file (Multiple Advisories)

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:P)
Published
Nov 10, 2021
Added
Nov 16, 2022
Modified
Sep 1, 2025

Description

A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.

Solutions

no-fix-redhat-rpm-packageredhat-upgrade-speexredhat-upgrade-speex-debuginforedhat-upgrade-speex-debugsourceredhat-upgrade-speex-develredhat-upgrade-speex-tools-debuginfo
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.