CVE-2021-21417

fluidsynth is a software synthesizer based on the SoundFont 2 specifications. A use after free violation was discovered in fluidsynth, that can be triggered when loading an invalid SoundFont file...

CVE-2021-21417: Use After Free

fluidsynth is a software synthesizer based on the SoundFont 2 specifications. A use after free violation was discovered in fluidsynth, that can be triggered when loading an invalid SoundFont file...

fluidsynth 资源管理错误漏洞

fluidsynth is an application system. for generating audio by reading and processing MIDI events from MIDI input devices using SoundFont. A resource management error vulnerability exists in fluidsynth, which stems from use after a free conflict was discovered, and may be triggered when loading an...

Remote Code Execution (RCE)

FluidSynth is vulnerable to remote code execution. The vulnerability exists due to a use after free in sfloader/fluidsffile.c that can result in arbitrary code execution or a denial of service DoS if a malicious soundfont2 file is loaded into a fluidsynth library...

Security update for fluidsynth (important)

openSUSE Security Update: Security update for fluidsynth Announcement ID: openSUSE-SU-2021:0570-1 Rating: important References: 1184705 Cross-References: CVE-2021-28421 CVSS scores: CVE-2021-28421 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports...

OPENSUSE-SU-2021:0570-1 Security update for fluidsynth

This update for fluidsynth fixes the following issues: - CVE-2021-28421: Fix use after free vulnerability in file loader boo1184705 This update was imported from the openSUSE:Leap:15.2:Update update project...

openSUSE: Security Advisory for fluidsynth (openSUSE-SU-2021:0553-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : fluidsynth (openSUSE-2021-553) (deprecated)

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-21417. Reason: This candidate is a duplicate of CVE-2021-21417. Notes: All CVE users should reference CVE-2021-21417 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

Security update for fluidsynth (important)

openSUSE Security Update: Security update for fluidsynth Announcement ID: openSUSE-SU-2021:0553-1 Rating: important References: 1184705 Cross-References: CVE-2021-28421 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...

OPENSUSE-SU-2021:0553-1 Security update for fluidsynth

This update for fluidsynth fixes the following issues: - CVE-2021-28421: Fix use after free vulnerability in file loader boo1184705...

CVE-2021-28421

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-21417. Reason: This candidate is a duplicate of CVE-2021-21417. Notes: All CVE users should reference CVE-2021-21417 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

PT-2021-17863

Name of the Vulnerable Software and Affected Versions: FluidSynth version 2.1.7 Description: The issue is related to a use after free vulnerability in the sfloader/fluid sffile.c file. This can lead to arbitrary code execution or a denial of service DoS if a malicious soundfont2 file is loaded in...

PT-2021-7966 · Unknown +2 · Fluidsynth +2

Name of the Vulnerable Software and Affected Versions: fluidsynth affected versions not specified Description: A use after free violation was discovered in fluidsynth that can be triggered when loading an invalid SoundFont file. This issue allows a remote attacker to cause a denial of service...

openSUSE Security Update : vlc (openSUSE-SU-2015:0201-1)

vlc was updated to the current openSUSE Tumbleweed version. live555 was also updated to the current openSUSE Tumbleweed version as a dependency. Security issues fixed : - Fix various buffer overflows and null ptr dereferencing boo914268, CVE-2014-9625. Other fixes : - Enable SSE2 instruction set...

Fedora Update for fluidsynth FEDORA-2014-8183

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 20 Update: fluidsynth-1.1.6-4.fc20

FluidSynth is a real-time software synthesizer based on the SoundFont 2 specifications. It is a "software synthesizer". FluidSynth can read MIDI ev ents from the MIDI input device and render them to the audio device. It features real-time effect modulation using SoundFont 2.01 modulators, and a...