{ "schema_version": "1.4.0", "id": "GHSA-g6w7-h383-7xgq", "modified": "2022-05-01T23:46:40Z", "published": "2022-05-01T23:46:40Z", "aliases": [ "CVE-2008-2109" ], "details": "field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service (CPU consumption) via an ID3_FIELD_TYPE_STRINGLIST field that ends in '\\0', which triggers an infinite loop.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-2109" }, { "type": "WEB", "url": "https://access.redhat.com/security/cve/CVE-2008-2109" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=445812" }, { "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42271" }, { "type": "WEB", "url": "https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00159.html" }, { "type": "WEB", "url": "http://bugs.gentoo.org/show_bug.cgi?id=210564" }, { "type": "WEB", "url": "http://secunia.com/advisories/30173" }, { "type": "WEB", "url": "http://secunia.com/advisories/30182" }, { "type": "WEB", "url": "http://security.gentoo.org/glsa/glsa-200805-15.xml" }, { "type": "WEB", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:103" }, { "type": "WEB", "url": "http://www.mars.org/mailman/public/mad-dev/2008-January/001366.html" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/29210" } ], "database_specific": { "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2008-05-07T21:20:00Z" } }