Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debianDebianDEBIAN:DLA-2292-1:F318A
HistoryJul 27, 2020 - 2:20 p.m.

[SECURITY] [DLA 2292-1] milkytracker security update

2020-07-2714:20:23
lists.debian.org
6

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.4%

JSON

Debian LTS Advisory DLA-2292-1 [email protected]
https://www.debian.org/lts/security/
July 27, 2020 https://wiki.debian.org/LTS

Package : milkytracker
Version : 0.90.86+dfsg-2+deb9u1
CVE ID : CVE-2019-14464 CVE-2019-14496 CVE-2019-14497 CVE-2020-15569
Debian Bug : 933964 964797

Several vulnerabilities were fixed in MilkyTracker, a music tracker for
composing music in the MOD and XM module file formats.

CVE-2019-14464

Heap-based buffer overflow in XMFile::read

CVE-2019-14496

Stack-based buffer overflow in LoaderXM::load

CVE-2019-14497

Heap-based buffer overflow in ModuleEditor::convertInstrument

CVE-2020-15569

Use-after-free in the PlayerGeneric destructor

For Debian 9 stretch, these problems have been fixed in version
0.90.86+dfsg-2+deb9u1.

We recommend that you upgrade your milkytracker packages.

For the detailed security status of milkytracker please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/milkytracker

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian10s390xmilkytracker< 1.02.00+dfsg-1+deb10u1milkytracker_1.02.00+dfsg-1+deb10u1_s390x.deb
Debian10mipselmilkytracker-dbgsym< 1.02.00+dfsg-1+deb10u1milkytracker-dbgsym_1.02.00+dfsg-1+deb10u1_mipsel.deb
Debian9allmilkytracker< 0.90.86+dfsg-2+deb9u1milkytracker_0.90.86+dfsg-2+deb9u1_all.deb
Debian10armhfmilkytracker< 1.02.00+dfsg-1+deb10u1milkytracker_1.02.00+dfsg-1+deb10u1_armhf.deb
Debian10amd64milkytracker-dbgsym< 1.02.00+dfsg-1+deb10u1milkytracker-dbgsym_1.02.00+dfsg-1+deb10u1_amd64.deb
Debian10armhfmilkytracker-dbgsym< 1.02.00+dfsg-1+deb10u1milkytracker-dbgsym_1.02.00+dfsg-1+deb10u1_armhf.deb
Debian10allmilkytracker< 1.02.00+dfsg-1+deb10u1milkytracker_1.02.00+dfsg-1+deb10u1_all.deb
Debian10i386milkytracker-dbgsym< 1.02.00+dfsg-1+deb10u1milkytracker-dbgsym_1.02.00+dfsg-1+deb10u1_i386.deb
Debian10mipsmilkytracker< 1.02.00+dfsg-1+deb10u1milkytracker_1.02.00+dfsg-1+deb10u1_mips.deb
Debian10mips64elmilkytracker< 1.02.00+dfsg-1+deb10u1milkytracker_1.02.00+dfsg-1+deb10u1_mips64el.deb
Rows per page:
1-10 of 271

Related

nessus 5
osv 7
openvas 5
ubuntu 1
debian 1
prion 4
cve 4
ubuntucve 4
cvelist 4
veracode 4
nvd 4
debiancve 4
fedora 2
nessus
nessus
Debian DLA-2292-1 : milkytracker security update
2020-07-28 00:00:00
Debian DLA-1961-1 : milkytracker security update
2019-10-22 00:00:00
Ubuntu 16.04 LTS : MilkyTracker vulnerabilities (USN-4499-1)
2020-09-15 00:00:00
osv
osv
milkytracker - security update
2020-07-27 00:00:00
milkytracker - security update
2019-10-21 00:00:00
MilkyTracker vulnerabilities
2020-09-15 19:00:53
openvas
openvas
Debian: Security Advisory (DLA-2292-1)
2020-07-28 00:00:00
Ubuntu: Security Advisory (USN-4499-1)
2020-09-16 00:00:00
Debian: Security Advisory (DLA-1961-1)
2019-10-22 00:00:00
ubuntu
ubuntu
MilkyTracker vulnerabilities
2020-09-15 00:00:00
debian
debian
[SECURITY] [DLA 1961-1] milkytracker security update
2019-10-21 14:14:34
prion
prion
Design/Logic Flaw
2020-07-06 14:15:00
Heap overflow
2019-08-01 18:15:00
Stack overflow
2019-08-01 18:15:00
cve
cve
CVE-2020-15569
2020-07-06 14:15:10
CVE-2019-14497
2019-08-01 18:15:11
CVE-2019-14464
2019-07-31 23:15:11
ubuntucve
ubuntucve
CVE-2020-15569
2020-07-06 00:00:00
CVE-2019-14464
2019-07-31 00:00:00
CVE-2019-14497
2019-08-01 00:00:00
cvelist
cvelist
CVE-2020-15569
2020-07-06 13:48:48
CVE-2019-14497
2019-08-01 17:28:27
CVE-2019-14464
2019-07-31 22:40:32
veracode
veracode
Use-after-free
2020-12-06 03:53:43
Denial Of Service (DoS)
2020-12-06 04:27:34
Buffer Overflow
2020-12-06 04:28:08
nvd
nvd
CVE-2020-15569
2020-07-06 14:15:10
CVE-2019-14497
2019-08-01 18:15:11
CVE-2019-14464
2019-07-31 23:15:11
debiancve
debiancve
CVE-2020-15569
2020-07-06 14:15:10
CVE-2019-14496
2019-08-01 18:15:11
CVE-2019-14497
2019-08-01 18:15:11
fedora
fedora
[SECURITY] Fedora 31 Update: milkytracker-1.02.00-5.fc31
2019-12-03 01:10:44
[SECURITY] Fedora 30 Update: milkytracker-1.02.00-4.fc30
2019-12-02 19:11:14

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.4%

JSON
Related for DEBIAN:DLA-2292-1:F318A
nessus5osv7openvas5ubuntu1debian1prion4cve4ubuntucve4cvelist4veracode4nvd4debiancve4fedora2