CVE-2020-21723

low-risk

Published 2023-08-22

A Segmentation Fault issue discovered StreamSerializer::extractStreams function in streamSerializer.cpp in oggvideotools 0.9.1 allows remote attackers to cause a denial of service (crash) via opening of crafted ogg file.

Do I need to act?

0.21% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.5/10 Medium

LOCAL / LOW complexity

Affected Products (1)

Ogg Video Tools

Affected Vendors

Ogg Video Tools Project

References (4)

Broken Link https://github.com/xiaoxiongwang/security/tree/master/oggvideotools#segv-occurs-...

Exploit https://sourceforge.net/p/oggvideotools/bugs/10/

Broken Link https://github.com/xiaoxiongwang/security/tree/master/oggvideotools#segv-occurs-...

Exploit https://sourceforge.net/p/oggvideotools/bugs/10/

/ 100

low-risk

Severity 18/34 · Moderate

Exploitability 1/34 · Minimal

Exposure 5/34 · Minimal