PT-2022-37562 · Auphone · Auphone

Published 2022-02-18 · Updated 2022-02-18

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions auphone (affected versions not specified)

Description The issue is related to a stack-based buffer overflow in auphone.c, which can be triggered by an environment variable. Additionally, the x11-util-cf-files package has been patched to allow building nas.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2022-0066

Affected Products

Auphone

References · 6

• https://advisories.mageia.org/MGASA-2022-0066.html · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/KQX5YL7OVJTMPDFFPFACDNNE2LEUDC3J · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2022-0066 · Vendor Advisory
• https://sourceforge.net/p/nas/bugs/8 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1943020 · Note
• https://bugs.mageia.org/show_bug.cgi?id=30020 · Note