53 matches found
CVE-2025-47256
CVE-2025-47256 LibXMP의 스택 오버플로우 설명 모듈 음악 재생을 위한 라이브러리인 libxmp의 depackpha 함수에 스택 기반 버퍼 오버플로우 취약점이 존재합니다. 이 취약점은 잘못된 Pha Packer PHA 모듈 파일을 파싱할 때 발생합니다. 로컬 스택 버퍼에 대한 부적절한 경계 검사로 인해 공격자가 배열 경계를 벗어난 데이터를 쓸 수 있으며, 이는 서비스 거부DoS 및 특정 조건에서는 원격 코드 실행RCE으로 이어질 수 있습니다. 빌드: gcc -g -O0 -I./libxmp/include poc.c...
EUVD-2013-1968
Malware in sbrugna...
EUVD-2025-13638
Malicious code in bioql PyPI...
The vulnerability of the `depack_pha` function in the `loaders/prowizard/pha.c` library for playing music with Libxmp allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the depackpha function in the loaders/prowizard/pha.c library, which is used for playing music with Libxmp, involves a numerical loss of significance. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service...
Linux Distros Unpatched Vulnerability : CVE-2025-47256
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Libxmp through 4.6.2 has a stack-based buffer overflow in depackpha in loaders/prowizard/pha.c via a malformed Pha format tracker module in a .mod file...
Security update for libxmp (moderate)
openSUSE Security Update: Security update for libxmp Announcement ID: openSUSE-SU-2025:0186-1 Rating: moderate References: Cross-References: CVE-2025-47256 CVSS scores: CVE-2025-47256 SUSE: 5.6 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L Affected Products: openSUSE Backports SLE-15-SP6 An update...
Fedora 42 : libxmp (2025-11090ba13f)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-11090ba13f advisory. Fixes CVE-2025-47256 . Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
Fedora: Security Advisory (FEDORA-2025-23e4aeeb91)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-a77aae3213)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-11090ba13f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 40 Update: libxmp-4.6.2-3.fc40
Libxmp is a library that renders module files to PCM data. It supports over 90 mainstream and obscure module formats including Protracker MOD, Scream Tracker 3 S3M, Fast Tracker II XM, and Impulse Tracker IT. Many compressed module formats are supported, including popular Unix, DOS, and Amiga fil...
[SECURITY] Fedora 41 Update: libxmp-4.6.2-3.fc41
Libxmp is a library that renders module files to PCM data. It supports over 90 mainstream and obscure module formats including Protracker MOD, Scream Tracker 3 S3M, Fast Tracker II XM, and Impulse Tracker IT. Many compressed module formats are supported, including popular Unix, DOS, and Amiga fil...
Fedora 40 : libxmp (2025-34421311f4)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-34421311f4 advisory. Fixes CVE-2025-47256 . Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
Fedora: Security Advisory (FEDORA-2025-34421311f4)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
libxmp-devel-4.6.3-1.1 on GA media (moderate)
libxmp-devel-4.6.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15081-1 Rating: moderate Cross-References: CVE-2025-47256 CVSS scores: CVE-2025-47256 SUSE : 5.6 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now...
Fedora 41 : libxmp (2025-a77aae3213)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-a77aae3213 advisory. Fixes CVE-2025-47256 . Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
OPENSUSE-SU-2025:15081-1 libxmp-devel-4.6.3-1.1 on GA media
These are all security issues fixed in the libxmp-devel-4.6.3-1.1 package on the GA media of openSUSE Tumbleweed...
[SECURITY] Fedora 42 Update: libxmp-4.6.2-3.fc42
Libxmp is a library that renders module files to PCM data. It supports over 90 mainstream and obscure module formats including Protracker MOD, Scream Tracker 3 S3M, Fast Tracker II XM, and Impulse Tracker IT. Many compressed module formats are supported, including popular Unix, DOS, and Amiga fil...
