5.5

CVE-2020-23903: fedoraproject fedora Divide By Zero

Modified
AliasesMGASA-2021-0550SUSE-SU-2021:3858-1SUSE-SU-2021:3860-1
Published 10-11-2021Last modified 04-08-2024

Vulnerability summary

CVE-2020-23903 is a medium (CVSS 5.5) Divide By Zero vulnerability in fedoraproject fedora. EPSS estimates a 1.01% chance of exploitation in the next 30 days, higher than 62.8% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
32/100
0100
Medium · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
1.01%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits1github

Timeline

  1. 10-11-2021
    PublishedVulnerability first disclosed.
  2. 04-08-2024
    Last modifiedVulnerability information updated.

Description

A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

1.01%

Chance of exploitation in the next 30 days

Percentile

63%

Versus all other CVEs

30-day change

No change 0.00 pp

From 1.01% on 22-09-2026

22-09-202622-10-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found
  • githubUnverified

    Speex

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Suse7 products
  • speex&distro=SUSE Linux Enterprise Module for Basesystem 15 SP2< 1.2-3.3.1
  • speex&distro=SUSE Linux Enterprise Module for Basesystem 15 SP3< 1.2-3.3.1
  • speex&distro=SUSE Linux Enterprise Module for Package Hub 15 SP2< 1.2-3.3.1
  • speex&distro=SUSE Linux Enterprise Module for Package Hub 15 SP3< 1.2-3.3.1
  • speex&distro=SUSE Linux Enterprise Server 12 SP5< 1.1.999_1.2rc1-24.3.1
Redhat5 products
  • speex< 0:1.2.0-11.el9
  • speex-debuginfo< 0:1.2.0-11.el9
  • speex-debugsource< 0:1.2.0-11.el9
  • speex-devel< 0:1.2.0-11.el9
  • speex-tools-debuginfo< 0:1.2.0-11.el9
Opensuse3 products
  • speex&distro=openSUSE Leap 15.2< 1.2-lp152.4.3.1
  • speex&distro=openSUSE Leap 15.3< 1.2-3.3.1
  • speex&distro=openSUSE Tumbleweed< 1.2-2.1
Debian1 product
  • speex< 1.2~rc1.2-2
Fedoraproject1 product
Mageia1 product
  • speex< 1.2.0-3.1.mga8
Ubuntu1 product
  • speex< 1.2~rc1.2-1.1ubuntu3 | < 1.2~rc1.2-1ubuntu1+esm1 | < 1.2~rc1.2-1ubuntu2.1 | < 1.2~rc1.2-1.1ubuntu1.20.04.1
Xiph1 product

8 vendors · 20 products

References

24 links
Show all 24 references