124 matches found
Fedora: Security Advisory (FEDORA-2025-6db4dcdf66)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 42 : fluidsynth (2025-1131df0f70)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-1131df0f70 advisory. Fix world writeable /run/lock/fluidsynth Update to 2.4.8 Tenable has extracted the preceding description block directly from the Fedora security advisory. No...
Fedora 41 : fluidsynth (2025-6db4dcdf66)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-6db4dcdf66 advisory. Fix world writeable /run/lock/fluidsynth Update to 2.4.8 Tenable has extracted the preceding description block directly from the Fedora security advisory. No...
Fedora: Security Advisory (FEDORA-2025-1131df0f70)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-0ea3179bb0)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 43 : fluidsynth (2025-0ea3179bb0)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-0ea3179bb0 advisory. Fix world writeable /run/lock/fluidsynth Update to 2.4.8 Tenable has extracted the preceding description block directly from the Fedora security advisory. No...
EUVD-2021-8704
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2021-21417
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fluidsynth is a software synthesizer based on the SoundFont 2 specifications. A use after free violation was discovered in fluidsynth, that can be triggered whe...
PT-2025-54491
Name of the Vulnerable Software and Affected Versions fluidsynth versions 2.4.6 and earlier Description The software contains a flaw that can lead to a denial-of-service condition or potentially allow for remote code execution. This issue stems from a null pointer dereference in the fluid synth...
The vulnerability of the FluidSynth software synthesizer lies in the use of memory after it is freed, allowing a hacker to cause a service failure.
The vulnerability of the FluidSynth software synthesizer relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to cause a service failure...
SUSE CVE-2021-21417
fluidsynth is a software synthesizer based on the SoundFont 2 specifications. A use after free violation was discovered in fluidsynth, that can be triggered when loading an invalid SoundFont file...
Debian DSA-5165-1 : vlc - security update
The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5165 advisory. Multiple vulnerabilities were discovered in the VLC media player, which could result in the execution of arbitrary code or denial of service if a malformed file is...
Mageia: Security Advisory (MGASA-2021-0324)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GLSA-202107-34 : FluidSynth: Remote code execution
The remote host is affected by the vulnerability described in GLSA-202107-34 FluidSynth: Remote code execution FluidSynth contains a use-after-free in sfloader/fluidsffile.c which occurs when parsing Soundfile 2 files. Impact : A remote attacker could entice a user to open a specially crafted...
Updated fluidsynth packages fix a security vulnerability
fluidsynth is a software synthesizer based on the SoundFont 2 specifications. A use after free violation was discovered in fluidsynth, that can be triggered when loading an invalid SoundFont file CVE-2021-21417...
MGASA-2021-0324 Updated fluidsynth packages fix a security vulnerability
fluidsynth is a software synthesizer based on the SoundFont 2 specifications. A use after free violation was discovered in fluidsynth, that can be triggered when loading an invalid SoundFont file CVE-2021-21417...
Debian DLA-2697-1 : fluidsynth - LTS security update (deprecated)
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-21417. Reason: This candidate is a duplicate of CVE-2021-21417. Notes: All CVE users should reference CVE-2021-21417 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...
Debian: Security Advisory (DLA-2697-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2697-1] fluidsynth security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2697-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz June 29, 2021 https://wiki.debian.org/LTS -...