53 matches found
CVE-2025-47256
CVE-2025-47256 LibXMP中的栈溢出 描述 libxmp（一个用于模块音乐播放的库）的 depackpha 函数中存在基于栈的缓冲区溢出漏洞。当解析恶意构造的 Pha Packer PHA 模块文件时会触发该漏洞。 由于对局部栈缓冲区缺乏适当的边界检查，攻击者可以向数组边界之外写入数据，可能导致拒绝服务 DoS，且在特定条件下可能实现远程代码执行 RCE。 构建： gcc -g -O0 -I./libxmp/include poc.c pocdata.h ./libxmp/lib/libxmp.a -lm -lz -o poccrasher 漏洞类型 栈缓冲区溢出 厂商...
EUVD-2013-1968
Malware in sbrugna...
EUVD-2025-13638
Malicious code in bioql PyPI...
The vulnerability of the `depack_pha` function in the `loaders/prowizard/pha.c` library for playing music with Libxmp allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the depackpha function in the loaders/prowizard/pha.c library, which is used for playing music with Libxmp, involves a numerical loss of significance. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service...
Linux Distros Unpatched Vulnerability : CVE-2025-47256
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Libxmp through 4.6.2 has a stack-based buffer overflow in depackpha in loaders/prowizard/pha.c via a malformed Pha format tracker module in a .mod file...
Security update for libxmp (moderate)
openSUSE Security Update: Security update for libxmp Announcement ID: openSUSE-SU-2025:0186-1 Rating: moderate References: Cross-References: CVE-2025-47256 CVSS scores: CVE-2025-47256 SUSE: 5.6 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L Affected Products: openSUSE Backports SLE-15-SP6 An update...
Fedora 42 : libxmp (2025-11090ba13f)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-11090ba13f advisory. Fixes CVE-2025-47256 . Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
Fedora: Security Advisory (FEDORA-2025-23e4aeeb91)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-a77aae3213)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-11090ba13f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 40 Update: libxmp-4.6.2-3.fc40
Libxmp is a library that renders module files to PCM data. It supports over 90 mainstream and obscure module formats including Protracker MOD, Scream Tracker 3 S3M, Fast Tracker II XM, and Impulse Tracker IT. Many compressed module formats are supported, including popular Unix, DOS, and Amiga fil...
[SECURITY] Fedora 41 Update: libxmp-4.6.2-3.fc41
Libxmp is a library that renders module files to PCM data. It supports over 90 mainstream and obscure module formats including Protracker MOD, Scream Tracker 3 S3M, Fast Tracker II XM, and Impulse Tracker IT. Many compressed module formats are supported, including popular Unix, DOS, and Amiga fil...
Fedora 40 : libxmp (2025-34421311f4)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-34421311f4 advisory. Fixes CVE-2025-47256 . Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
libxmp-devel-4.6.3-1.1 on GA media (moderate)
libxmp-devel-4.6.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15081-1 Rating: moderate Cross-References: CVE-2025-47256 CVSS scores: CVE-2025-47256 SUSE : 5.6 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now...
Fedora: Security Advisory (FEDORA-2025-34421311f4)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 41 : libxmp (2025-a77aae3213)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-a77aae3213 advisory. Fixes CVE-2025-47256 . Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
OPENSUSE-SU-2025:15081-1 libxmp-devel-4.6.3-1.1 on GA media
These are all security issues fixed in the libxmp-devel-4.6.3-1.1 package on the GA media of openSUSE Tumbleweed...
[SECURITY] Fedora 42 Update: libxmp-4.6.2-3.fc42
Libxmp is a library that renders module files to PCM data. It supports over 90 mainstream and obscure module formats including Protracker MOD, Scream Tracker 3 S3M, Fast Tracker II XM, and Impulse Tracker IT. Many compressed module formats are supported, including popular Unix, DOS, and Amiga fil...
