377 matches found
AlmaLinux 9.2 [TuxCare] Security Update: mpg123 / mpg123-devel / mpg123-libs / mpg123-plugins-pulseaudio (ALMALINUX9.2:CLSA-2026:1779694248)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779694248 advisory. - An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a...
Rocky Linux 8 [CIQ] Security Update: mpg123 / mpg123-debuginfo / mpg123-debugsource / mpg123-devel / etc (crlsa-2024_11193)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202411193 advisory. mpg123: Buffer overflow when writing decoded PCM samples CVE-2024-10573 Tenable has extracted the preceding description block directly from the CIQ security...
Rocky Linux 9 [CIQ] Security Update: mpg123 / mpg123-debuginfo / mpg123-debugsource / mpg123-devel / etc (crlsa-2024_11242)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202411242 advisory. mpg123: Buffer overflow when writing decoded PCM samples CVE-2024-10573 Tenable has extracted the preceding description block directly from the CIQ security...
Astra Linux – Vulnerability in mpg123
A out-of-bounds write flaw was discovered in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write beyond the end of a heap-located buffer. As a result, heap corruption may occur, and arbitrary code execution is not prevented. The complexity required to exploit this fla...
CVE-2026-73662
CVE-2026-73662 affects FreePBX Music on Hold module (versions 17.0.1–17.0.7). The vulnerability arises from validateCustomConfiguration() in Music.class.php allowing dangerous command-line options to mpg123 and other allowed players, enabling an authenticated administrator to write files, open co...
CVE-2026-73662 Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files
FreePBX is an open source IP PBX. From 17.0.1 until 17.0.7, the FreePBX Music on Hold module permits dangerous command-line options for /usr/bin/mpg123 and other allowed players in validateCustomConfiguration in Music.class.php. An authenticated administrator can use options that write files, ope...
CVE-2026-73662 Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files
FreePBX is an open source IP PBX. From 17.0.1 until 17.0.7, the FreePBX Music on Hold module permits dangerous command-line options for /usr/bin/mpg123 and other allowed players in validateCustomConfiguration in Music.class.php. An authenticated administrator can use options that write files, ope...
Slackware Linux 15.0 / current mpg123 Vulnerability (SSA:2026-117-01)
The version of mpg123 installed on the remote host is prior to 1.33.5. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-117-01 advisory. New mpg123 packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding...
[slackware-security] mpg123
New mpg123 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mpg123-1.33.5-i586-1.txz: Upgraded. mpg123: Fix generic control mode for largefile-sensitive builds, where 32 bit offt was used with...
MiracleLinux 8 : mpg123-1.32.9-1.el8_10 (AXSA:2024-9431:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9431:01 advisory. mpg123: Buffer overflow when writing decoded PCM samples CVE-2024-10573 Tenable has extracted the preceding description block directly from the MiracleLinux...
MiracleLinux 9 : mpg123-1.32.9-1.el9_5 (AXSA:2024-9488:02)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9488:02 advisory. mpg123: Buffer overflow when writing decoded PCM samples CVE-2024-10573 Tenable has extracted the preceding description block directly from the MiracleLinux...
EUVD-2004-0803
Malware in sbrugna...
EUVD-2017-4334
Malware in sbrugna...
EUVD-2007-0576
Malware in sbrugna...
EUVD-2014-9314
Malware in sbrugna...
EUVD-2003-0571
Malware in sbrugna...
EUVD-2006-3352
Malware in sbrugna...
EUVD-2017-2330
Malware in sbrugna...