397 matches found
Astra Linux – Vulnerability in mpg123
A out-of-bounds write flaw was discovered in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write beyond the end of a heap-located buffer. As a result, heap corruption may occur, and arbitrary code execution is not prevented. The complexity required to exploit this fla...
Rocky Linux 9 [CIQ] Security Update: mpg123 / mpg123-debuginfo / mpg123-debugsource / mpg123-devel / etc (crlsa-2024_11242)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202411242 advisory. mpg123: Buffer overflow when writing decoded PCM samples CVE-2024-10573 Tenable has extracted the preceding description block directly from the CIQ security...
Rocky Linux 8 [CIQ] Security Update: mpg123 / mpg123-debuginfo / mpg123-debugsource / mpg123-devel / etc (crlsa-2024_11193)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202411193 advisory. mpg123: Buffer overflow when writing decoded PCM samples CVE-2024-10573 Tenable has extracted the preceding description block directly from the CIQ security...
AlmaLinux 9.2 [TuxCare] Security Update: mpg123 / mpg123-devel / mpg123-libs / mpg123-plugins-pulseaudio (ALMALINUX9.2:CLSA-2026:1779694248)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779694248 advisory. - An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a...
MGASA-2026-0428 Updated mpg123 package fixes security vulnerabilities
Updated packages fix security vulnerabilities, please se the reference...
Updated mpg123 package fixes security vulnerabilities
Updated packages fix security vulnerabilities, please se the reference...
CVE-2026-73662 Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files
FreePBX is an open source IP PBX. From 17.0.1 until 17.0.7, the FreePBX Music on Hold module permits dangerous command-line options for /usr/bin/mpg123 and other allowed players in validateCustomConfiguration in Music.class.php. An authenticated administrator can use options that write files, ope...
CVE-2026-73662 Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files
FreePBX is an open source IP PBX. From 17.0.1 until 17.0.7, the FreePBX Music on Hold module permits dangerous command-line options for /usr/bin/mpg123 and other allowed players in validateCustomConfiguration in Music.class.php. An authenticated administrator can use options that write files, ope...
CVE-2026-73662
CVE-2026-73662 affects FreePBX Music on Hold module (versions 17.0.1–17.0.7). The vulnerability arises from validateCustomConfiguration() in Music.class.php allowing dangerous command-line options to mpg123 and other allowed players, enabling an authenticated administrator to write files, open co...
Slackware Linux 15.0 / current mpg123 Vulnerability (SSA:2026-117-01)
The version of mpg123 installed on the remote host is prior to 1.33.5. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-117-01 advisory. New mpg123 packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding...
[slackware-security] mpg123
New mpg123 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mpg123-1.33.5-i586-1.txz: Upgraded. mpg123: Fix generic control mode for largefile-sensitive builds, where 32 bit offt was used with...
MiracleLinux 9 : mpg123-1.32.9-1.el9_5 (AXSA:2024-9488:02)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9488:02 advisory. mpg123: Buffer overflow when writing decoded PCM samples CVE-2024-10573 Tenable has extracted the preceding description block directly from the MiracleLinux...
MiracleLinux 8 : mpg123-1.32.9-1.el8_10 (AXSA:2024-9431:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9431:01 advisory. mpg123: Buffer overflow when writing decoded PCM samples CVE-2024-10573 Tenable has extracted the preceding description block directly from the MiracleLinux...
EUVD-2006-3352
Malware in sbrugna...
EUVD-2004-0989
Malware in sbrugna...
EUVD-2004-0803
Malware in sbrugna...
EUVD-2004-1281
Malware in sbrugna...
EUVD-2006-1656
Malware in sbrugna...