CVE-2020-13152

MEDIUM EPSS 87.5%
Published May 20, 20206y ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published May 20, 2020 6y ago
Last Modified Jun 17, 2026 2w ago

Description

A remote user can create a specially crafted M3U file, media playlist file that when loaded by the target user, will trigger a memory leak, whereby Amarok 2.8.0 continue to waste resources over time, eventually allows attackers to cause a denial of service.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
87.5% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-401

Affected Products 1

VendorProductVersionRange
kdeamarok2.8.0any

References 2

  • packetstormsecurity.com http://packetstormsecurity.com/files/159898/Amarok-2.8.0-Denial-Of-Service.html
    ExploitThird Party AdvisoryVDB Entry
  • r00texpl0it.wordpress.com https://r00texpl0it.wordpress.com/2020/05/20/kde-amarok-2-8-0-allows-remote-attackers-to-cause-a-denial-of-service/
    ExploitThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.