Rocky Linux 9 [CIQ] Security Update: flac / flac-debuginfo / flac-debugsource / flac-devel / flac-libs / etc (crlsa-2023_5048)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20235048 advisory. flac: Remote Code Execution RCE via the bitwritergrow function, by supplying crafted input to the encoder CVE-2020-22219 Tenable has extracted the preceding...

CLSA-2026-1788193482 Fix CVE(s): CVE-2020-22219

SECURITY UPDATE: double free when growing the bit writer fails - debian/patches/CVE-2020-22219.patch: add nofree variants of the saferealloc helpers and use them where the caller keeps its own pointer on failure, so bitwritergrow no longer leaves a freed bw-buffer for FLACbitwriterfree to release...

MiracleLinux 8 : flac-1.3.2-9.el8.1 (AXSA:2023-6402:03)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6402:03 advisory. flac: Remote Code Execution RCE via the bitwritergrow function, by supplying crafted input to the encoder CVE-2020-22219 Tenable has extracted the preceding...

MiracleLinux 9 : flac-1.3.3-10.el9.1 (AXSA:2023-6394:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6394:02 advisory. flac: Remote Code Execution RCE via the bitwritergrow function, by supplying crafted input to the encoder CVE-2020-22219 Tenable has extracted the preceding...

CentOS 8 : flac (CESA-2023:5046)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:5046 advisory. - Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder...

SUSE SLED15: flac / flac-devel / flac-devel-32bit / flac-doc / libFLAC++6 / etc (SUSE-SU-2023:3635-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3635-1 advisory. - CVE-2020-22219: Fixed a buffer overflow in function bitwritergrow which might allow a remote attacker t...

Ubuntu 20.04 LTS / 22.04 LTS : FLAC vulnerability (USN-6360-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6360-1 advisory. It was discovered that FLAC incorrectly handled encoding certain files. A remote attacker could use this issue to cause FLAC to crash, resulting in a...

RHEL 9 : flac (RHSA-2023:5048)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:5048 advisory. FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference...

CVE-2020-22219

Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder...

CVE-2020-22219

Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder...

CVE-2020-22219

CVE-2020-22219 affects FLAC when using the bitwriter_grow_ implementation; the vulnerability is a buffer overflow that could allow remote code execution via crafted encoder input in FLAC builds prior to 1.4.0. Multiple connected advisories confirm the issue and indicate that mitigations involve u...

CVE-2020-22219: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder...