CVE-2017-11551 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-11551 Interim 1 34 2025-11-05T03:54:46Z current 2021-05-30T13:59:11Z 2025-11-05T03:54:46Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-11551 The id3_field_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (OOM) via a crafted MP3 file. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2018-March/003820.html E-Mail link for SUSE-SU-2018:0715-1 https://lists.suse.com/pipermail/sle-security-updates/2018-March/003823.html E-Mail link for SUSE-SU-2018:0722-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 openSUSE Leap 15.0 libid3tag libid3tag-0.15.1b-132.3.1 libid3tag-devel-0.15.1b-132.3.1 libid3tag-devel-0.15.1b-184.3.1 libid3tag0 libid3tag0-0.15.1b-184.3.1 libid3tag0-0.15.1b-3.14 libid3tag0-0.15.1b-lp150.3.1 libid3tag0-0.16.3-160000.3.2 libid3tag0-0.15.1b-184.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libid3tag0-0.15.1b-184.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libid3tag0-0.15.1b-184.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libid3tag0-0.15.1b-3.14 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libid3tag0-0.15.1b-3.14 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 libid3tag0-0.15.1b-3.14 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 libid3tag0-0.15.1b-3.14 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 libid3tag0-0.15.1b-3.14 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 libid3tag0-0.15.1b-3.14 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 libid3tag0-0.16.3-160000.3.2 as a component of SUSE Linux Enterprise Server 16.0 libid3tag-0.15.1b-132.3.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libid3tag-devel-0.15.1b-132.3.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libid3tag-devel-0.15.1b-184.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libid3tag0-0.15.1b-184.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libid3tag-devel-0.15.1b-184.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libid3tag0-0.15.1b-184.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libid3tag-devel-0.15.1b-184.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libid3tag0-0.15.1b-184.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libid3tag-devel-0.15.1b-184.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libid3tag0-0.15.1b-184.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libid3tag0-0.15.1b-184.3.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP2 libid3tag0-0.15.1b-184.3.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 libid3tag0-0.15.1b-184.3.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP4 libid3tag0-0.15.1b-184.3.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 libid3tag0-0.15.1b-lp150.3.1 as a component of openSUSE Leap 15.0 libid3tag0 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libid3tag as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libid3tag0 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 libid3tag as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 The id3_field_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (OOM) via a crafted MP3 file. CVE-2017-11551 SUSE Linux Enterprise Desktop 12 SP2:libid3tag0-0.15.1b-184.3.1 SUSE Linux Enterprise Desktop 12 SP3:libid3tag0-0.15.1b-184.3.1 SUSE Linux Enterprise Desktop 12 SP4:libid3tag0-0.15.1b-184.3.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libid3tag0-0.15.1b-3.14 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libid3tag0-0.15.1b-3.14 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libid3tag0-0.15.1b-3.14 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:libid3tag0-0.15.1b-3.14 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libid3tag0-0.15.1b-3.14 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:libid3tag0-0.15.1b-3.14 SUSE Linux Enterprise Server 16.0:libid3tag0-0.16.3-160000.3.2 SUSE Linux Enterprise Software Development Kit 11 SP4:libid3tag-0.15.1b-132.3.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libid3tag-devel-0.15.1b-132.3.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libid3tag-devel-0.15.1b-184.3.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libid3tag0-0.15.1b-184.3.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libid3tag-devel-0.15.1b-184.3.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libid3tag0-0.15.1b-184.3.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libid3tag-devel-0.15.1b-184.3.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libid3tag0-0.15.1b-184.3.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libid3tag-devel-0.15.1b-184.3.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libid3tag0-0.15.1b-184.3.1 SUSE Linux Enterprise Workstation Extension 12 SP2:libid3tag0-0.15.1b-184.3.1 SUSE Linux Enterprise Workstation Extension 12 SP3:libid3tag0-0.15.1b-184.3.1 SUSE Linux Enterprise Workstation Extension 12 SP4:libid3tag0-0.15.1b-184.3.1 SUSE Linux Enterprise Workstation Extension 12 SP5:libid3tag0-0.15.1b-184.3.1 openSUSE Leap 15.0:libid3tag0-0.15.1b-lp150.3.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libid3tag SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libid3tag0 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H