CVE-2023-34824

2023-06-1414:15:10

Debian Security Bug Tracker

security-tracker.debian.org

cve-2023-34824

fdkaac

heap buffer overflow

caf_info function

caf_reader.c

unix

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

Percentile

12.7%

JSON

fdkaac before 1.0.5 was discovered to contain a heap buffer overflow in caf_info function in caf_reader.c.

OSVersionArchitecturePackageVersionFilename
Debian12allfdkaac<= 1.0.0-1fdkaac_1.0.0-1_all.deb
Debian11allfdkaac<= 1.0.0-1fdkaac_1.0.0-1_all.deb
Debian999allfdkaac<= 1.0.0-1fdkaac_1.0.0-1_all.deb
Debian13allfdkaac<= 1.0.0-1fdkaac_1.0.0-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	fdkaac	<= 1.0.0-1	fdkaac_1.0.0-1_all.deb
Debian	11	all	fdkaac	<= 1.0.0-1	fdkaac_1.0.0-1_all.deb
Debian	999	all	fdkaac	<= 1.0.0-1	fdkaac_1.0.0-1_all.deb
Debian	13	all	fdkaac	<= 1.0.0-1	fdkaac_1.0.0-1_all.deb