CVE-2025-63648

A NULL pointer dereference in the dacpreplyplayqueueeditmove function src/httpddacp.c of owntone-server commit b7e385f allows attackers to cause a Denial of Service DoS via sending a crafted DACP request to the server...

CVE-2025-63647

A NULL pointer dereference in the parsemeta function src/httpddaap.c of owntone-server commit 334beb allows attackers to cause a Denial of Service DoS via sending a crafted DAAP request to the server...

CVE-2025-57155

NULL pointer dereference in the daapreplygroups function in src/httpddaap.c in owntone-server through commit 5e6f19a newer commit after version 28.2 allows remote attackers to cause a Denial of Service...

CVE-2025-57155

NULL pointer dereference in the daapreplygroups function in src/httpddaap.c in owntone-server through commit 5e6f19a newer commit after version 28.2 allows remote attackers to cause a Denial of Service...

CVE-2025-63648

A NULL pointer dereference in the dacpreplyplayqueueeditmove function src/httpddacp.c of owntone-server commit b7e385f allows attackers to cause a Denial of Service DoS via sending a crafted DACP request to the server...

CVE-2025-57155

NULL pointer dereference in the daapreplygroups function in src/httpddaap.c in owntone-server through commit 5e6f19a newer commit after version 28.2 allows remote attackers to cause a Denial of Service...

CVE-2025-57155

NULL pointer dereference in the daapreplygroups function in src/httpddaap.c in owntone-server through commit 5e6f19a newer commit after version 28.2 allows remote attackers to cause a Denial of Service...

CVE-2025-57156

Summary (CVE-2025-57156) : A NULL pointer dereference in the owntone-server component, specifically in the dacp_reply_playqueueedit_clear function in src/httpd_dacp.c, can be triggered by a remote attacker through commits up to 6d604a1 (post-version 28.12). This vulnerability allows remote Denial...

EUVD-2021-24836

Malware in sbrugna...

CVE-2021-38383

OwnTone aka owntone-server through 28.1 has a use-after-free in netbind in misc.c...

OPENSUSE-SU-2024:11135-1 owntone-28.2-1.2 on GA media

These are all security issues fixed in the owntone-28.2-1.2 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2021-38383

OwnTone aka owntone-server through 28.1 has a use-after-free in netbind in misc.c...

Use After Free

OwnTone aka owntone-server is vulnerable to use-after-free. The vulnerability exists in netbind in misc.c which allows an attacker to cause an application crash...

CVE-2021-38383

OwnTone aka owntone-server through 28.1 has a use-after-free in netbind in misc.c...

CVE-2021-38383

OwnTone aka owntone-server through 28.1 has a use-after-free in netbind in misc.c...

Double free

OwnTone aka owntone-server through 28.1 has a use-after-free in netbind in misc.c...

CVE-2021-38383

CVE-2021-38383 affects OwnTone (owntone-server) up to version 28.1, with a use-after-free in net_bind() within misc.c. The NVD data shows CVSSv2 base 7.5 (HIGH) and CVSSv3.1 base 9.8 (CRITICAL), indicating serious impact across network vectors. Connected sources also indicate mitigation: OpenSUSE...

CVE-2021-38383

OwnTone aka owntone-server through 28.1 has a use-after-free in netbind in misc.c...

CVE-2021-38383

OwnTone aka owntone-server through 28.1 has a use-after-free in netbind in misc.c...

OwnTone 资源管理错误漏洞

OwnTone is an open source Linux/FreeBSD DAAP iTunes, MPD Music Player Daemon and RSP Roku media server. A security vulnerability exists in OwnTone aka owntone-server 28.1, which stems from a use-after-free in netbind in misc.c. The vulnerability is caused by a use-after-free in netbind...