PT-2007-7471 · Network Audio System · Nas
Luigi Auriemma
·
Publicado
1970-01-01
·
Atualizado
2018-10-16
·
CVE-2007-1547
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
nas versions prior to 1.8b
Description
The issue concerns multiple vulnerabilities in the nas package, which can be exploited remotely to compromise the confidentiality, integrity, and availability of protected information. The
ReadRequestFromClient function in server/os/io.c is specifically vulnerable to remote attackers, who can cause a denial of service (crash) via multiple simultaneous connections, triggering a NULL pointer dereference.Recommendations
For nas versions prior to 1.8b, update to version 1.8b or later to resolve the issue.
As a temporary workaround, consider restricting access to the
ReadRequestFromClient function in server/os/io.c to minimize the risk of exploitation.Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Nas