MiracleLinux 9 : flac-1.3.3-10.el9.1 (AXSA:2023-6394:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6394:02 advisory. flac: Remote Code Execution RCE via the bitwritergrow function, by supplying crafted input to the encoder CVE-2020-22219 Tenable has extracted the preceding...

RHEL 9 : flac (RHSA-2023:5048)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:5048 advisory. FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference...

CVE-2020-22219

CVE-2020-22219 affects FLAC when using the bitwriter_grow_ implementation; the vulnerability is a buffer overflow that could allow remote code execution via crafted encoder input in FLAC builds prior to 1.4.0. Multiple connected advisories confirm the issue and indicate that mitigations involve u...