CVE-2017-11550
The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a...
The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference and application crash) via a crafted mp3 file.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference and application crash) via a crafted mp3 file.
- Record
CVE-2017-11550- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-476
- Updated
- 2026-11-02
CVE List No score
The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference and application crash) via a crafted mp3 file.
- Record
CVE-2017-11550- Updated
- 2026-11-02
EUVDEUVD-2017-3166 No score
The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference and application crash) via a crafted mp3 file.
- Record
EUVD-2017-3166- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qm72-g7qg-9h32
The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a...
The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference and application crash) via a crafted mp3 file.
- Record
GHSA-qm72-g7qg-9h32- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
OSVALPINE-CVE-2017-11550
The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference and application crash) via a crafted mp3 file.
- Record
ALPINE-CVE-2017-11550- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVAZL-36951
CVE-2017-11550 affecting package libid3tag for versions less than 0.16.3-7
The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference and application crash) via a crafted mp3 file.
- Record
AZL-36951- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 8 moreShow less
OSVAZL-7262
CVE-2017-11550 affecting package libid3tag 0.15.1b-33
The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference and application crash) via a crafted mp3 file.
- Record
AZL-7262- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference and application crash) via a crafted mp3 file.
- Record
CVE-2017-11550- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2017-11550
The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference and application crash) via a crafted mp3 file.
- Record
DEBIAN-CVE-2017-11550- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2017-11550
The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference and application crash) via a crafted mp3 file.
- Record
UBUNTU-CVE-2017-11550- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2018-0223 No score
Updated libid3tag packages fix security vulnerabilities
id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service (DoS). (CVE-2004-2779)
field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service (CPU consumption) via an ID3_FIELD_TYPE_STRINGLIST field that ends in '\0', which triggers an infinite loop. (CVE-2008-2109)
The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference and application crash) via a crafted mp3 file. (CVE-2017-11550)
The id3_field_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (OOM) via a crafted MP3 file. (CVE-2017-11551)
- Record
MGASA-2018-0223- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10948-1 No score
libid3tag-devel-0.15.1b-188.15 on GA media
These are all security issues fixed in the libid3tag-devel-0.15.1b-188.15 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10948-1- Updated
- 2026-11-02
OSVSUSE-SU-2018:0715-1 No score
Security update for libid3tag
This update for libid3tag fixes the following issues:
- CVE-2004-2779 CVE-2017-11551: Fixed id3_utf16_deserialize() in utf16.c, which previously misparsed ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until OOM leading to DoS. (bsc#1081959 bsc#1081961)
- CVE-2017-11550 CVE-2008-2109: Fixed the handling of unknown encodings when parsing ID3 tags. (bsc#1081962 bsc#387731)
- Record
SUSE-SU-2018:0715-1- Updated
- 2026-11-02
OSVSUSE-SU-2018:0722-1 No score
Security update for libid3tag
This update for libid3tag fixes the following issues:
- CVE-2004-2779 CVE-2017-11551: Fixed id3_utf16_deserialize() in utf16.c, which previously misparsed ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until OOM leading to DoS. (bsc#1081959 bsc#1081961)
- CVE-2017-11550 CVE-2008-2109: Fixed the handling of unknown encodings when parsing ID3 tags. (bsc#1081962 bsc#387731)
- Record
SUSE-SU-2018:0722-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libid3tagAlpine:v3.16 |
before 0.16.2-r0 | 0.16.2-r0 |
libid3tagAlpine:v3.17 |
before 0.16.2-r0 | 0.16.2-r0 |
libid3tagAlpine:v3.18 |
before 0.16.2-r0 | 0.16.2-r0 |
libid3tagAlpine:v3.19 |
before 0.16.2-r0 | 0.16.2-r0 |
libid3tagAlpine:v3.20 |
before 0.16.2-r0 | 0.16.2-r0 |
libid3tagAlpine:v3.21 |
before 0.16.2-r0 | 0.16.2-r0 |
libid3tagAlpine:v3.22 |
before 0.16.2-r0 | 0.16.2-r0 |
libid3tagAlpine:v3.23 |
before 0.16.2-r0 | 0.16.2-r0 |
libid3tagAlpine:v3.24 |
before 0.16.2-r0 | 0.16.2-r0 |
libid3tagAzure Linux:3 |
before 0.16.3-7 | 0.16.3-7 |
Show 13 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libid3tagAzure Linux:2 |
through 0.15.1b-33 | None known |
libid3tagDebian:12 |
before 0.15.1b-9 | 0.15.1b-9 |
libid3tagDebian:13 |
before 0.15.1b-9 | 0.15.1b-9 |
libid3tagDebian:14 |
before 0.15.1b-9 | 0.15.1b-9 |
libid3tagMageia:5 From an advisory covering 4 CVEs |
before 0.15.1b-16.2.mga5 | 0.15.1b-16.2.mga5 |
libid3tagMageia:6 From an advisory covering 4 CVEs |
before 0.15.1b-17.2.mga6 | 0.15.1b-17.2.mga6 |
libid3tagSUSE:Linux Enterprise Software Development Kit 11 SP4 From an advisory covering 4 CVEs |
before 0.15.1b-132.3.1 | 0.15.1b-132.3.1 |
libid3tagSUSE:Linux Enterprise Desktop 12 SP2 From an advisory covering 4 CVEs |
before 0.15.1b-184.3.1 | 0.15.1b-184.3.1 |
libid3tagSUSE:Linux Enterprise Desktop 12 SP3 From an advisory covering 4 CVEs |
before 0.15.1b-184.3.1 | 0.15.1b-184.3.1 |
libid3tagSUSE:Linux Enterprise Software Development Kit 12 SP2 From an advisory covering 4 CVEs |
before 0.15.1b-184.3.1 | 0.15.1b-184.3.1 |
libid3tagSUSE:Linux Enterprise Software Development Kit 12 SP3 From an advisory covering 4 CVEs |
before 0.15.1b-184.3.1 | 0.15.1b-184.3.1 |
libid3tagSUSE:Linux Enterprise Workstation Extension 12 SP2 From an advisory covering 4 CVEs |
before 0.15.1b-184.3.1 | 0.15.1b-184.3.1 |
libid3tagSUSE:Linux Enterprise Workstation Extension 12 SP3 From an advisory covering 4 CVEs |
before 0.15.1b-184.3.1 | 0.15.1b-184.3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-11550 is a medium vulnerability (CVSS 5.5) in Libid3tag Project Libid3tag, published July 31, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.47%, the 73rd percentile. Fixed in libid3tag 0.16.2-r0.
References
seclists.org/fulldisclosure/2017/Jul/85
nvd.nist.gov/vuln/detail/CVE-2017-11550
github.com/advisories/GHSA-qm72-g7qg-9h32
security.alpinelinux.org/vuln/CVE-2017-11550
security-tracker.debian.org/tracker/CVE-2017-11550
advisories.mageia.org/MGASA-2018-0223.html
Show 13 moreShow less
bugs.mageia.org/show_bug.cgi?id=22802
suse.com/support/update/announcement/2018/suse-su-20180715-1
bugzilla.suse.com/1081959
ubuntu.com/security/CVE-2017-11550
cve.org/CVERecord?id=CVE-2017-11550