CVE-2019-15117

parseaudiomixerunit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to out-of-bounds memory access...

CVE-2019-15118

checkinputterm in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion...

UBUNTU-CVE-2019-15118

checkinputterm in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion...

CVE-2019-15117

CVE-2019-15117 affects the Linux kernel component parse_audio_mixer_unit in sound/usb/mixer.c. The issue arises when processing a short USB descriptor, resulting in out-of-bounds memory access. The vulnerability is local in scope with potential memory corruption as the impact. The initial entry s...

CVE-2019-15117

parseaudiomixerunit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to out-of-bounds memory access...

CVE-2019-15118

checkinputterm in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion...

CVE-2019-15118

checkinputterm in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion...

PT-2019-13997 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.2.9 Description: The issue is related to the check input term function in the sound/usb/mixer.c file of the Linux kernel, which mishandles recursion. This leads to kernel stack exhaustion. Recommendations: For...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2019:1923-1 Rating: important References: 1051510 1055117 1071995 1083647 1083710 1085030 1086103 1102247 1103991 1103992 1104745 1106061 1109837 1111666 1112374 1114279 1119222 1123959 1127034 1127315...

The vulnerability of the lsx_make_lpf function (effect_i_dsp.c) in the audio editor Sound eXchange allows a hacker to trigger a service failure.

The vulnerability of the lsxmakelpf function effectidsp.c in the Sound eXchange audio editor is related to a speculative overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the channel_start function in the remix.c script of the Sound eXchange audio editor allows a hacker to trigger a service failure.

The vulnerability of the channelstart function in the remix.c script of the Sound eXchange audio editor is related to a serious overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the lsx_make_lpf function (effect_i_dsp.c) in the audio editor Sound eXchange allows a hacker to trigger a service failure.

The vulnerability of the lsxmakelpf function effectidsp.c in the Sound eXchange audio editor is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the bitrv2 function (fft4g.c) in the Sound eXchange audio editor allows a hacker to cause a service failure.

The vulnerability of the bitrv2 function fft4g.c in the Sound eXchange audio editor is related to the output of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

[SECURITY] Fedora 29 Update: aubio-0.4.9-1.fc29

aubio is a library for audio labeling. Its features include segmenting a sound file before each of its attacks, performing pitch detection, tapping the beat and producing midi streams from live audio. The name aubio comes from 'audio' with a typo: several transcription errors are likely to be fou...

[SECURITY] Fedora 30 Update: aubio-0.4.9-1.fc30

aubio is a library for audio labeling. Its features include segmenting a sound file before each of its attacks, performing pitch detection, tapping the beat and producing midi streams from live audio. The name aubio comes from 'audio' with a typo: several transcription errors are likely to be fou...

PT-2019-3103 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.2.8 Description: The issue is related to a NULL pointer dereference in the sound/usb/helper.c motu microbookii driver of the Linux kernel. This can be caused by a malicious USB device. Exploitation of this iss...

Fedora Update for aubio FEDORA-2019-00ca0acb47

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

NewStart CGSL MAIN 4.05 : java-1.7.0-openjdk Multiple Vulnerabilities (NS-SA-2019-0142)

The remote NewStart CGSL host, running version MAIN 4.05, has java-1.7.0-openjdk packages installed that are affected by multiple vulnerabilities: - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Sound. Supported versions that are affected are Ja...

NewStart CGSL MAIN 4.05 : java-1.8.0-openjdk Multiple Vulnerabilities (NS-SA-2019-0146)

The remote NewStart CGSL host, running version MAIN 4.05, has java-1.8.0-openjdk packages installed that are affected by multiple vulnerabilities: - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Sound. Supported versions that are affected are Ja...

NewStart CGSL CORE 5.04 / MAIN 5.04 : java-1.7.0-openjdk Multiple Vulnerabilities (NS-SA-2019-0040)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has java-1.7.0-openjdk packages installed that are affected by multiple vulnerabilities: - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Sound. Supported versions that are...