Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:25238
HistoryMay 10, 2020 - 11:21 p.m.

Denial Of Service (DoS)

2020-05-1023:21:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10

EPSS

0.001

Percentile

40.0%

lame is vulnerable to denial of service (DoS). The vulnerability exists as the lame_init_params function in lame.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted audio file with a negative sample rate.