Security update for libmad (important)

openSUSE Security Update: Security update for libmad Announcement ID: openSUSE-SU-2022:10169-1 Rating: important References: 1036968 Cross-References: CVE-2017-8373 CVSS scores: CVE-2017-8373 NVD : 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2017-8373 SUSE: 7.8...

SUSE: Security Advisory (SUSE-SU-2022:3782-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libmad (SUSE-SU-2022:3782-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3782-1 advisory. - CVE-2017-8373: Fixed heap-based buffer overflow in madlayerIII bsc1036968. - CVE-2017-8372:...

SUSE-SU-2022:3782-1 Security update for libmad

This update for libmad fixes the following issues: - CVE-2017-8373: Fixed heap-based buffer overflow in madlayerIII bsc1036968. - CVE-2017-8372: Fixed assertion failure in layer3.c bsc1036969...

new packages: libmad

An update is available for libmad. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

AlmaLinux 8 : GStreamer, libmad, and SDL (ALSA-2020:1631)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2020:1631 advisory. - The maddecoderrun function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service SIGABRT because of double free or...

Mageia: Security Advisory (MGASA-2019-0078)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2018-0019)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Advisory ROSA-SA-2021-1877

Software: libmad 0.15.1b OS: Cobalt 7.9 CVE-ID: CVE-2018-7263 CVE-Crit: CRITICAL CVE-DESC: The maddecoderrun function in decoder.c in Underbit libmad before 0.15.1b allows remote attackers to cause a denial of service SIGABRT due to double release or corruption or possibly have unspecified other...

CentOS 8 : GStreamer, libmad, and SDL (CESA-2020:1631)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1631 advisory. - libmad: Double-free in the maddecoderrun function CVE-2018-7263 Note that Nessus has not tested for this issue but has instead relied only on the application'...

RHEL 8 : GStreamer, libmad, and SDL (RHSA-2020:1631)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1631 advisory. The GStreamer library provides a streaming media framework based on graphs of media data filters. The libmad package is an MPEG audio decoder capable...

GStreamer, libmad, and SDL security, bug fix, and enhancement update

gstreamer1 1.16.1-2 - Update to 1.16.2 for correctly pick up for side gating - Resolves: rhbz1756299 1.16.1-1 - Update to 1.16.1 - Enable libcap for the ptp helper permissions - Resolves: rhbz1756299 gstreamer1-plugins-bad-free 1.16.1-1 - Update to 1.16.1 - Remove upstreamed patches - Remove...

Arbitrary Code Execution

libmad is vulnerable to arbitrary code execution. The vulnerability exists through a double-free in the maddecoderrun function...

Low: Red Hat Security Advisory: GStreamer, libmad, and SDL security, bug fix, and enhancement update

An update for GStreamer, libmad, and SDL is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

libmad: Double-free in the mad_decoder_run() function

The maddecoderrun function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service SIGABRT because of double free or corruption or possibly have unspecified other impact via a crafted file. NOTE: this may overlap CVE-2017-11552...

ALSA-2020:1631 Low: GStreamer, libmad, and SDL security, bug fix, and enhancement update

The GStreamer library provides a streaming media framework based on graphs of media data filters. The libmad package is an MPEG audio decoder capable of 24-bit output. Simple DirectMedia Layer SDL is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer...

GStreamer, libmad, and SDL security, bug fix, and enhancement update

An update is available for libmad, gstreamer1-plugins-ugly-free, gstreamer1-plugins-bad-free, SDL2, orc, gstreamer1. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Low: GStreamer, libmad, and SDL security, bug fix, and enhancement update

The GStreamer library provides a streaming media framework based on graphs of media data filters. The libmad package is an MPEG audio decoder capable of 24-bit output. Simple DirectMedia Layer SDL is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer...

RLSA-2020:1631 Low: GStreamer, libmad, and SDL security, bug fix, and enhancement update

The GStreamer library provides a streaming media framework based on graphs of media data filters. The libmad package is an MPEG audio decoder capable of 24-bit output. Simple DirectMedia Layer SDL is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer...

FreeBSD : libmad -- multiple vulnerabilities (b48e7b14-052a-11ea-a1de-53b029d2b061)

National Vulnerability Database : CVE-2017-8372: The madlayerIII function in layer3.c in Underbit MAD libmad 0.15.1b, if NDEBUG is omitted, allows remote attackers to cause a denial of service assertion failure and application exit via a crafted audio file. CVE-2017-8373: The madlayerIII function...