{"id":"CVE-2020-23903","aliases":["ALSA-2022:7979","DEBIAN-CVE-2020-23903","EUVD-2020-16640","GHSA-r85g-7qgq-6wrq","MGASA-2021-0550","OESA-2022-1701","RHSA-2022:7979","RLSA-2022:7979","ROOT-OS-DEBIAN-11-CVE-2020-23903","SUSE-SU-2021:3858-1","SUSE-SU-2021:3860-1","UBUNTU-CVE-2020-23903","USN-5280-1","openSUSE-SU-2021:1538-1","openSUSE-SU-2021:3860-1","openSUSE-SU-2024:11632-1"],"status":"published","title":"A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows...","description":"A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01011,"percentile":0.63443,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-369"],"published":"2021-11-10T21:26:12Z","modified":"2026-10-29T11:31:19Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"speex","fixed_in":["1.2.0-11.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"speex-devel","fixed_in":["1.2.0-11.el9"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"speex","fixed_in":["1.2~rc1.2-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"speex","fixed_in":["1.2~rc1.2-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"speex","fixed_in":["1.2~rc1.2-2"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"speex","fixed_in":["1.2.0-3.1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"speex","fixed_in":["1.2.0-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"speex","fixed_in":["1.2.0-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"speex","fixed_in":["1.2.0-6.oe2203"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"speex","fixed_in":["0:1.2.0-11.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"speex-debuginfo","fixed_in":["0:1.2.0-11.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"speex-debugsource","fixed_in":["0:1.2.0-11.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"speex-tools-debuginfo","fixed_in":["0:1.2.0-11.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"speex-debuginfo","fixed_in":["0:1.2.0-11.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"speex-debugsource","fixed_in":["0:1.2.0-11.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"speex-devel","fixed_in":["0:1.2.0-11.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"speex-tools-debuginfo","fixed_in":["0:1.2.0-11.el9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"speex","fixed_in":["0:1.2.0-11.el9"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"speex","fixed_in":["1.2~rc1.2-1.1.root.io.3","1.2~rc1.2-1.1.root.io.5","1.2~rc1.2-1.1.root.io.2","1.2~rc1.2-1.1.root.io.4","1.2~rc1.2-1.1.root.io.1","1.2~rc1.2-1.1.aikido.6"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-speex","fixed_in":["1.2~rc1.2-1.1.root.io.3","1.2~rc1.2-1.1.root.io.5","1.2~rc1.2-1.1.root.io.2","1.2~rc1.2-1.1.root.io.4","1.2~rc1.2-1.1.root.io.1","1.2~rc1.2-1.1.aikido.6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"speex","fixed_in":["1.1.999_1.2rc1-24.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"speex","fixed_in":["1.1.999_1.2rc1-24.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"speex","fixed_in":["1.1.999_1.2rc1-24.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"speex","fixed_in":["1.2-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"speex","fixed_in":["1.2-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP2","package":"speex","fixed_in":["1.2-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"speex","fixed_in":["1.2-3.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"speex","fixed_in":["1.2~rc1.2-1ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"speex","fixed_in":["1.2~rc1.2-1ubuntu2.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"speex","fixed_in":["1.2~rc1.2-1.1ubuntu1.20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"speex","fixed_in":["1.2~rc1.2-1.1ubuntu3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"speex","fixed_in":["1.2-lp152.4.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"speex","fixed_in":["1.2-3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"speex","fixed_in":["1.2-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-11.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"speex-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-11.el9"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2~rc1.2-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2~rc1.2-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2~rc1.2-2"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-3.1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-6.oe2203"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-11.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"speex-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-11.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"speex-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-11.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"speex-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-11.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"speex-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-11.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"speex-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-11.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"speex-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-11.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"speex-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-11.el9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-11.el9"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2~rc1.2-1.1.root.io.3"},{"fixed":"1.2~rc1.2-1.1.root.io.5"},{"fixed":"1.2~rc1.2-1.1.root.io.2"},{"fixed":"1.2~rc1.2-1.1.root.io.4"},{"fixed":"1.2~rc1.2-1.1.root.io.1"},{"fixed":"1.2~rc1.2-1.1.aikido.6"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2~rc1.2-1.1.root.io.3"},{"fixed":"1.2~rc1.2-1.1.root.io.5"},{"fixed":"1.2~rc1.2-1.1.root.io.2"},{"fixed":"1.2~rc1.2-1.1.root.io.4"},{"fixed":"1.2~rc1.2-1.1.root.io.1"},{"fixed":"1.2~rc1.2-1.1.aikido.6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.999_1.2rc1-24.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.999_1.2rc1-24.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.999_1.2rc1-24.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP2","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-3.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2~rc1.2-1ubuntu1+esm1"}]}],"versions":["1.2~rc1.2-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2~rc1.2-1ubuntu2.1"}]}],"versions":["1.2~rc1.2-1ubuntu1","1.2~rc1.2-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2~rc1.2-1.1ubuntu1.20.04.1"}]}],"versions":["1.2~rc1.2-1ubuntu2","1.2~rc1.2-1.1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2~rc1.2-1.1ubuntu3"}]}],"versions":["1.2~rc1.2-1.1ubuntu1","1.2~rc1.2-1.1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2~rc1.2-1ubuntu1+esm1"}]}],"versions":["1.2~rc1.2-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2~rc1.2-1ubuntu2.1"}]}],"versions":["1.2~rc1.2-1ubuntu1","1.2~rc1.2-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2~rc1.2-1.1ubuntu1.20.04.1"}]}],"versions":["1.2~rc1.2-1ubuntu2","1.2~rc1.2-1.1ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-lp152.4.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"speex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-2.1"}]}]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"xiph","product":"speex"}],"references":[{"url":"https://github.com/xiph/speex/issues/13","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","fix","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3SEV2ZRR47GSD3M7O5PH4XEJMKJJNG2/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LXCRAYNW5ESCE2PIGTUXZNZHNYFLJ6PX/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-23903","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LXCRAYNW5ESCE2PIGTUXZNZHNYFLJ6PX/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3SEV2ZRR47GSD3M7O5PH4XEJMKJJNG2/"},{"url":"https://github.com/advisories/GHSA-r85g-7qgq-6wrq"},{"url":"https://access.redhat.com/errata/RHSA-2022:7979","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-23903","tags":["report"]},{"url":"https://bugzilla.redhat.com/2024250","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-7979.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-23903","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0550.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29718","tags":["report"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2021-December/009798.html","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/M3JTMWLYWFOOWVMDAUX2VBB5ZULOV3LY/","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/R3SEV2ZRR47GSD3M7O5PH4XEJMKJJNG2/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1701","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024250","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7979.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-23903","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7979","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213858-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1192580","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-23903","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213860-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-23903","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5280-1","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MVNURRS2JE5OAOZLI3BVLEQCWIGU65MY/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-23903","description":"A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.","status":"published","published":"2021-11-10T21:26:12Z","modified":"2024-08-04T15:05:11.286Z","updated_at":"2026-11-02T14:35:49.209579Z"}],"euvd":[{"id":"EUVD-2020-16640","description":"A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.","status":"published","published":"2021-11-10T21:26:12Z","modified":"2024-08-04T15:05:11Z","updated_at":"2026-11-03T03:07:21.209139Z"}],"ghsa":[{"id":"GHSA-r85g-7qgq-6wrq","title":"A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows...","description":"A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.","status":"published","published":"2022-05-24T19:20:12Z","modified":"2023-01-30T05:03:33Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-369"],"updated_at":"2026-11-02T14:46:51.868413Z"}],"nvd":[{"id":"CVE-2020-23903","description":"A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.","status":"published","published":"2021-11-10T22:15:11.563Z","modified":"2026-06-17T03:05:04.317Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-369"],"updated_at":"2026-11-02T14:06:46.101987Z"}],"osv":[{"id":"CVE-2020-23903","description":"A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.","status":"published","published":"2021-11-10T22:15:11.563Z","modified":"2026-10-20T10:52:50.222465274Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:15.534837Z"},{"id":"DEBIAN-CVE-2020-23903","description":"A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.","status":"published","published":"2021-11-10T22:15:11.563Z","modified":"2026-10-26T12:02:39.809572324Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:33.729655Z"},{"id":"OESA-2022-1701","title":"speex security update","description":"Speex is an Open Source/Free Software patent-free audio compression format designed for speech. The Speex Project aims to lower the barrier of entry for voice applications by providing a free alternative to expensive proprietary speech codecs. Moreover, Speex is well-adapted to Internet applications and provides useful features that are not present in most other codecs.\r\n\r\nSecurity Fix(es):\r\n\r\nA Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.(CVE-2020-23903)","status":"published","published":"2022-06-10T11:04:58Z","modified":"2026-08-18T01:16:00.579346171Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2022:7979","title":"Red Hat Security Advisory: speex security update","status":"published","published":"2024-09-16T07:45:46Z","modified":"2026-06-26T12:22:06.147970938Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RLSA-2022:7979","title":"Low: speex security update","description":"Speex is a patent-free compression format designed especially for speech. It is specialized for voice communications at low bit-rates.\n\nSecurity Fix(es):\n\n* speex: divide by zero in read_samples() via crafted WAV file (CVE-2020-23903)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.","status":"published","published":"2022-11-15T06:12:44Z","modified":"2025-10-09T05:47:13.676717Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2020-23903","description":"A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.","status":"published","published":"2021-11-10T22:15:00Z","modified":"2026-04-22T12:34:36.713431Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:23.905183Z"},{"id":"ALSA-2022:7979","title":"Low: speex security update","description":"Speex is a patent-free compression format designed especially for speech. It is specialized for voice communications at low bit-rates.\n\nSecurity Fix(es):\n\n* speex: divide by zero in read_samples() via crafted WAV file (CVE-2020-23903)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-15T00:00:00Z","modified":"2026-10-29T11:31:19.567845203Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"MGASA-2021-0550","title":"Updated speex packages fix security vulnerability","description":"Fixed zero division error in read_samples (bsc#1192580). (CVE-2020-23903)\n","status":"published","published":"2021-12-10T22:19:07Z","modified":"2026-04-16T04:43:10.943089577Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2021:1538-1","title":"Security update for speex","description":"This update for speex fixes the following issues:\n\n- CVE-2020-23903: Fixed zero division error in read_samples (bsc#1192580).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-12-06T13:06:37Z","modified":"2026-02-04T03:52:44.517364Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:3860-1","title":"Security update for speex","description":"This update for speex fixes the following issues:\n\n- CVE-2020-23903: Fixed zero division error in read_samples (bsc#1192580).\n","status":"published","published":"2021-12-01T16:05:23Z","modified":"2026-02-04T03:19:50.89362Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2024:11632-1","title":"libspeex1-1.2-2.1 on GA media","description":"These are all security issues fixed in the libspeex1-1.2-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:21:59.04681Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2020-23903","title":"CVE-2020-23903 in speex - Patched by Root","description":"Root has patched CVE-2020-23903 in the speex package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-08-23T08:16:13Z","modified":"2026-08-23T10:17:54.129414594Z","updated_at":"2026-11-02T15:53:28.544053Z"},{"id":"SUSE-SU-2021:3858-1","title":"Security update for speex","description":"This update for speex fixes the following issues:\n\n- CVE-2020-23903: Fixed zero division error in read_samples (bsc#1192580).\n","status":"published","published":"2021-12-01T16:02:26Z","modified":"2026-02-04T03:28:36.378996Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3860-1","title":"Security update for speex","description":"This update for speex fixes the following issues:\n\n- CVE-2020-23903: Fixed zero division error in read_samples (bsc#1192580).\n","status":"published","published":"2021-12-01T16:05:22Z","modified":"2026-02-04T04:00:35.470132Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"USN-5280-1","title":"speex vulnerability","description":"It was discovered that Speex incorrectly handled certain WAV files.\nAn attacker could possibly use this issue to cause a denial of service.\n","status":"published","published":"2022-02-10T12:14:06Z","modified":"2026-06-25T13:31:01.247556947Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}