JACK2 Information Disclosure Vulnerability

JACK2 is a low latency audio server. A security vulnerability exists in the posix/JackSocket.cpp file of libjack in JACK2 versions 1.9.1 through 1.9.12. An attacker could exploit this vulnerability to disclose information, cause file corruption, or cause other harm...

DEBIAN-CVE-2019-13351

posix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 as distributed with alsa-plugins 1.1.7 and later has a "double file descriptor close" issue during a failed connection attempt when jackd2 is not running. Exploitation success depends on multithreaded timing of that double close, which...