Lucene search
K

7 matches found

OSV
OSV
added 2023/09/30 7:15 p.m.2 views

MGASA-2023-0277 Updated flac packages fix security vulnerability

The updated packages fix a security vulnerability: Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder. CVE-2020-22219...

7.8CVSS7.6AI score0.00749EPSS
Exploits1References4
OSV
OSV
added 2022/03/06 10:40 a.m.7 views

MGASA-2022-0085 Updated flac packages fix security vulnerability

In appendtoverifyfifointerleaved of streamencoder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. CVE-2021-0561...

5.5CVSS5.2AI score0.00465EPSS
Exploits0References3
OSV
OSV
added 2020/12/29 11:57 a.m.4 views

MGASA-2020-0480 Updated flac packages fix security vulnerability

In FLACbitreaderreadricesignedblock of bitreader.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation CVE-2020-0499...

4.3CVSS4.9AI score0.03964EPSS
Exploits0References4
OSV
OSV
added 2018/05/09 6:33 p.m.4 views

MGASA-2018-0227 Updated flac packages fix security vulnerability

Memory leak in readmetadatavorbiscomment function could lead to denial of service CVE-2017-6888...

5.5CVSS5.7AI score0.01372EPSS
Exploits0References3
Mageia
Mageia
added 2018/05/09 6:33 p.m.26 views

Updated flac packages fix security vulnerability

Memory leak in readmetadatavorbiscomment function could lead to denial of service CVE-2017-6888...

5.5CVSS3.1AI score0.01372EPSS
Exploits0References2
Mageia
Mageia
added 2014/11/29 8:18 p.m.37 views

Updated flac packages fix security vulnerabilities

In libFLAC before 1.3.1, a stack overflow CVE-2014-8962 and a heap overflow CVE-2014-9028, which may result in arbitrary code execution, can be triggered by passing a maliciously crafted .flac file to the libFLAC decoder...

7.5CVSS7.1AI score0.0986EPSS
Exploits0References2
OSV
OSV
added 2014/11/29 8:18 p.m.5 views

MGASA-2014-0499 Updated flac packages fix security vulnerabilities

In libFLAC before 1.3.1, a stack overflow CVE-2014-8962 and a heap overflow CVE-2014-9028, which may result in arbitrary code execution, can be triggered by passing a maliciously crafted .flac file to the libFLAC decoder...

7.5CVSS7.1AI score0.0986EPSS
Exploits0References3
Rows per page
Query Builder