PT-2017-10395 · Unknown+2 · Game-Music-Emu+2

Chris Evans · Published 2016-12-15 · Updated 2024-05-01 · CVE-2016-9957

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions game-music-emu versions prior to 0.6.1

Description A stack-based buffer overflow issue exists.

Recommendations For versions prior to 0.6.1, update to version 0.6.1 or later to resolve the issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2018-3685

CVE-2016-9957

DLA-750-1

DSA-3735-1

MGASA-2016-0428

MGASA-2017-0046

OPENSUSE-SU-2017_0022-1

OPENSUSE-SU-2024:10944-1

SUSE-SU-2016:3250-1

SUSE-SU-2016_3250-1

Affected Products

Alt Linux

Suse

Game-Music-Emu

References · 56

• 🔥 https://scarybeastsecurity.blogspot.in/2016/12/redux-compromising-linux-using-snes.html · Exploit
• https://security-tracker.debian.org/tracker/CVE-2016-9957 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-9957 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHAQI5Q2XDSPGRRKPJJM3A73VWAFSFL · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2018-3685 · Vendor Advisory
• https://security.gentoo.org/glsa/201707-02 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3735-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-9957 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9961 · Security Note
• https://advisories.mageia.org/MGASA-2017-0046.html · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7Z2OVERYM6NW3FGVGTJUNSL5ZNFSH2S · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/game-music-emu · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-9957 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:3250-1 · Vendor Advisory