{"id":"CVE-2008-2109","aliases":["DEBIAN-CVE-2008-2109","EUVD-2008-2106","GHSA-g6w7-h383-7xgq","MGASA-2018-0223","SUSE-SU-2018:0715-1","SUSE-SU-2018:0722-1","openSUSE-SU-2024:10454-1"],"status":"published","title":"field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of...","description":"field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service (CPU consumption) via an ID3_FIELD_TYPE_STRINGLIST field that ends in '\\0', which triggers an infinite loop.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.07267,"percentile":0.94385,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2008-05-07T21:00:00Z","modified":"2026-10-23T17:47:26Z","fixes":[{"ecosystem":"Debian:12","package":"libid3tag","fixed_in":["0.15.1b-8"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libid3tag","fixed_in":["0.15.1b-8"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libid3tag","fixed_in":["0.15.1b-8"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libid3tag","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.1b-8"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libid3tag","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.1b-8"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libid3tag","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.1b-8"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"libid3tag","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.1b-16.2.mga5"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:6","package":"libid3tag","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.1b-17.2.mga6"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"libid3tag","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.1b-132.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"libid3tag","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.1b-184.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libid3tag","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.1b-184.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"libid3tag","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.1b-184.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libid3tag","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.1b-184.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP2","package":"libid3tag","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.1b-184.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"libid3tag","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.1b-184.3.1"}]}],"bundled":4}],"products":[{"vendor":"media-libs","product":"libid3tag"}],"references":[{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:103","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-15.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00159.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://secunia.com/advisories/30173","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/30182","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=210564","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"http://www.securityfocus.com/bid/29210","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.mars.org/mailman/public/mad-dev/2008-January/001366.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Exploit","evidence"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42271","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-2109"},{"url":"https://access.redhat.com/security/cve/CVE-2008-2109"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=445812"},{"url":"https://github.com/advisories/GHSA-g6w7-h383-7xgq"},{"url":"https://security-tracker.debian.org/tracker/CVE-2008-2109","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0223.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22802","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180715-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1081959","tags":["report"]},{"url":"https://bugzilla.suse.com/1081961","tags":["report"]},{"url":"https://bugzilla.suse.com/1081962","tags":["report"]},{"url":"https://bugzilla.suse.com/387731","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2004-2779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-2109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11551","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180722-1/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2008-2109","description":"field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service (CPU consumption) via an ID3_FIELD_TYPE_STRINGLIST field that ends in '\\0', which triggers an infinite loop.","status":"published","published":"2008-05-07T21:00:00Z","modified":"2024-08-07T08:49:58.16Z","updated_at":"2026-11-02T14:34:44.675398Z"}],"euvd":[{"id":"EUVD-2008-2106","description":"field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service (CPU consumption) via an ID3_FIELD_TYPE_STRINGLIST field that ends in '\\0', which triggers an infinite loop.","status":"published","published":"2008-05-07T21:00:00Z","modified":"2024-08-07T08:49:58Z","updated_at":"2026-11-03T01:38:58.164001Z"}],"ghsa":[{"id":"GHSA-g6w7-h383-7xgq","title":"field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of...","description":"field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service (CPU consumption) via an ID3_FIELD_TYPE_STRINGLIST field that ends in '\\0', which triggers an infinite loop.","status":"published","published":"2022-05-01T23:46:40Z","modified":"2023-02-10T05:06:30Z","updated_at":"2026-11-02T14:54:01.789224Z"}],"nvd":[{"id":"CVE-2008-2109","description":"field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service (CPU consumption) via an ID3_FIELD_TYPE_STRINGLIST field that ends in '\\0', which triggers an infinite loop.","status":"published","published":"2008-05-07T21:20:00Z","modified":"2026-06-16T22:53:07.32Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:26.27008Z"}],"osv":[{"id":"CVE-2008-2109","description":"field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service (CPU consumption) via an ID3_FIELD_TYPE_STRINGLIST field that ends in '\\0', which triggers an infinite loop.","status":"published","published":"2008-05-07T21:20:00Z","modified":"2026-04-16T06:20:22.177408692Z","updated_at":"2026-11-02T15:43:57.178433Z"},{"id":"DEBIAN-CVE-2008-2109","description":"field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service (CPU consumption) via an ID3_FIELD_TYPE_STRINGLIST field that ends in '\\0', which triggers an infinite loop.","status":"published","published":"2008-05-07T21:20:00Z","modified":"2026-10-23T17:47:26.794268003Z","updated_at":"2026-11-02T15:45:23.742363Z"},{"id":"MGASA-2018-0223","title":"Updated libid3tag packages fix security vulnerabilities","description":"id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b\nmisparses ID3v2 tags encoded in UTF-16 with an odd number of bytes,\ntriggering an endless loop allocating memory until an OOM condition is\nreached, leading to denial-of-service (DoS). (CVE-2004-2779)\n\nfield.c in the libid3tag 0.15.0b library allows context-dependent\nattackers to cause a denial of service (CPU consumption) via an\nID3_FIELD_TYPE_STRINGLIST field that ends in '\\0', which triggers an\ninfinite loop. (CVE-2008-2109)\n\nThe id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows\nremote attackers to cause a denial of service (NULL Pointer Dereference\nand application crash) via a crafted mp3 file. (CVE-2017-11550)\n\nThe id3_field_parse function in field.c in libid3tag 0.15.1b allows\nremote attackers to cause a denial of service (OOM) via a crafted MP3\nfile. (CVE-2017-11551)\n","status":"published","published":"2018-05-09T18:33:09Z","modified":"2026-04-16T06:25:16.529489342Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2024:10454-1","title":"libid3tag-devel-0.15.1b-185.6 on GA media","description":"These are all security issues fixed in the libid3tag-devel-0.15.1b-185.6 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:35:11.36078Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2018:0715-1","title":"Security update for libid3tag","description":"This update for libid3tag fixes the following issues:\n\n- CVE-2004-2779 CVE-2017-11551: Fixed id3_utf16_deserialize() in utf16.c,\n  which previously misparsed ID3v2 tags encoded in UTF-16 with an odd\n  number of bytes, triggering an endless loop allocating memory until\n  OOM leading to DoS. (bsc#1081959 bsc#1081961)\n- CVE-2017-11550 CVE-2008-2109: Fixed the handling of unknown\n  encodings when parsing ID3 tags. (bsc#1081962 bsc#387731)\n","status":"published","published":"2018-03-16T15:31:57Z","modified":"2026-02-04T02:45:55.096172Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0722-1","title":"Security update for libid3tag","description":"This update for libid3tag fixes the following issues:\n\n- CVE-2004-2779 CVE-2017-11551: Fixed id3_utf16_deserialize() in utf16.c,\n  which previously misparsed ID3v2 tags encoded in UTF-16 with an odd\n  number of bytes, triggering an endless loop allocating memory until\n  OOM leading to DoS. (bsc#1081959 bsc#1081961)\n- CVE-2017-11550 CVE-2008-2109: Fixed the handling of unknown\n  encodings when parsing ID3 tags. (bsc#1081962 bsc#387731)\n","status":"published","published":"2018-03-16T15:32:29Z","modified":"2026-02-04T04:08:07.553291Z","updated_at":"2026-11-02T15:53:44.594517Z"}]}}