CVE-2017-11720

EUVD-2017-3330
There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 63%
Affected Products (NVD)
VendorProductVersion
lame_projectlame
3.99.5
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
lame
bookworm
3.100-6
fixed
bullseye
3.100-3
fixed
sid
3.100-6
fixed
trixie
3.100-6
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
lame
artful
not-affected
bionic
not-affected
cosmic
not-affected
disco
not-affected
eoan
not-affected
focal
not-affected
groovy
not-affected
hirsute
not-affected
impish
not-affected
jammy
not-affected
trusty
Fixed 3.99.5+repack1-3ubuntu1+esm2
released
xenial
not-affected
zesty
ignored
Common Weakness Enumeration
References
https://blogs.gentoo.org/ago/2017/06/17/lame-divide-by-zero-in-parse_wave_header-get_audio-c/
https://bugs.debian.org/777159
https://sourceforge.net/p/lame/bugs/460/
https://blogs.gentoo.org/ago/2017/06/17/lame-divide-by-zero-in-parse_wave_header-get_audio-c/
https://bugs.debian.org/777159
https://sourceforge.net/p/lame/bugs/460/