PT-2007-7470 · Debian+1 · Debian+1
Luigi Auriemma
·
Publicado
1970-01-01
·
Atualizado
2018-10-16
·
CVE-2007-1546
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
nas versions prior to 1.8b
libaudio2 (affected versions not specified)
nas-bin (affected versions not specified)
nas-doc (affected versions not specified)
libaudio-dev (affected versions not specified)
Description
The issue concerns multiple vulnerabilities in various packages of the Debian GNU/Linux and Gentoo Linux operating systems. These vulnerabilities can be exploited remotely, potentially leading to breaches of confidentiality, integrity, and availability of protected information. Specifically, an array index error in the Network Audio System (NAS) before version 1.8a SVN 237 allows remote attackers to cause a denial of service via large input values in certain functions.
Recommendations
For nas versions prior to 1.8b, update to version 1.8b or later.
For libaudio2, there is no information about a newer version that contains a fix for this vulnerability.
For nas-bin, there is no information about a newer version that contains a fix for this vulnerability.
For nas-doc, there is no information about a newer version that contains a fix for this vulnerability.
For libaudio-dev, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Debian
Gentoo Linux