Lucene search
Gentoo FoundationMGASA-2014-0499HistoryNov 29, 2014 - 11:18 p.m.
Updated flac packages fix security vulnerabilities
2014-11-2923:18:26
Gentoo Foundation
advisories.mageia.org
10
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.652 Medium
EPSS
Percentile
97.9%
In libFLAC before 1.3.1, a stack overflow (CVE-2014-8962) and a heap overflow (CVE-2014-9028), which may result in arbitrary code execution, can be triggered by passing a maliciously crafted .flac file to the libFLAC decoder.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 4 | noarch | flac | < 1.3.0-2.1 | flac-1.3.0-2.1.mga4 |
Related
veracode
veracode
Arbitrary Code Executionary
2019-05-02 05:12:58
Arbitrary Code Execution
2019-01-15 09:05:08
securityvulns
securityvulns
flac memory corruptions
2014-11-30 00:00:00
[USN-2426-1] FLAC vulnerabilities
2014-11-30 00:00:00
[oCERT 2014-008] libFLAC multiple issues
2014-11-30 00:00:00
openvas
openvas
Debian Security Advisory DSA 3082-1 (flac - security update)
2014-11-30 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:1663-1)
2021-04-19 00:00:00
Fedora Update for mingw-flac FEDORA-2014-16270
2014-12-14 00:00:00
centos
centos
flac security update
2015-03-31 23:41:43
nessus
nessus
RHEL 6 / 7 : flac (RHSA-2015:0767)
2015-04-01 00:00:00
SuSE 11.3 Security Update : flac (SAT Patch Number 10029)
2014-12-06 00:00:00
openSUSE Security Update : flac (openSUSE-SU-2014:1588-1)
2014-12-09 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: flac-1.3.1-1.fc20
2014-12-07 04:34:01
[SECURITY] Fedora 19 Update: flac-1.3.1-1.fc19
2014-12-20 08:45:29
[SECURITY] Fedora 22 Update: flac-1.3.1-5.fc22
2015-08-15 02:21:52
archlinux
archlinux
flac: arbitrary code execution
2014-11-26 00:00:00
osv
osv
flac - security update
2014-11-30 00:00:00
flac - security update
2014-12-05 00:00:00
ibm
ibm
debian
debian
[SECURITY] [DSA 3082-1] flac security update
2014-11-30 13:36:27
[SECURITY] [DSA 3082-1] flac security update
2014-11-30 13:36:27
[SECURITY] [DLA 99-1] flac security update
2014-12-05 18:53:03
redhat
redhat
(RHSA-2015:0767) Important: flac security update
2015-03-31 00:00:00
ubuntu
ubuntu
FLAC vulnerabilities
2014-11-27 00:00:00
amazon
amazon
Important: flac
2015-04-15 21:48:00
f5
f5
K17301056 : libFLAC vulnerabilities CVE-2014-8962 and CVE-2014-9028
2017-07-19 00:00:00
oraclelinux
oraclelinux
flac security update
2015-03-31 00:00:00
freebsd
freebsd
flac -- Multiple vulnerabilities
2014-11-25 00:00:00
android
android
CVE-2014-9028
2015-10-01 00:00:00
prion
prion
Stack overflow
2014-11-26 15:59:00
Heap overflow
2014-11-26 15:59:00
cve
cve
CVE-2014-9028
2014-11-26 15:59:00
CVE-2014-8962
2014-11-26 15:59:00
debiancve
debiancve
CVE-2014-9028
2014-11-26 15:59:00
CVE-2014-8962
2014-11-26 15:59:00
ubuntucve
ubuntucve
CVE-2014-8962
2014-11-26 00:00:00
CVE-2014-9028
2014-11-26 00:00:00
gentoo
gentoo
FLAC: User-assisted execution of arbitrary code
2014-12-26 00:00:00
threatpost
threatpost
Popular Apps on Google Play Store Remain Unpatched
2019-11-21 12:05:58
androidsecurity
androidsecurity
Nexus Security Bulletin - October 2015
2015-10-05 00:00:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.652 Medium
EPSS
Percentile
97.9%
Related for MGASA-2014-0499