PT-2023-12165 · Unknown+1 · Schism Tracker+1

Bsdboy · Published 2023-02-17 · Updated 2025-03-18 · CVE-2021-32419

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Schism Tracker version 20200412

Description The issue allows an attacker to obtain sensitive information via the fmt mtm load song function in fmt/mtm.c.

Recommendations For Schism Tracker version 20200412, consider disabling the fmt mtm load song function until a patch is available.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2021-32419

Affected Products

Debian

Schism Tracker

References · 15

• 🔥 https://github.com/schismtracker/schismtracker/issues/249 · Exploit
• https://github.com/schismtracker/schismtracker/commit/1e2cc389a2a058fd13d99460c11115a6f7f7a6a4 · Patch
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32419 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-32419 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-32419 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-32419 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-32419 · Security Note
• https://ubuntu.com/security/CVE-2021-32419 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/schism · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-32419 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-32419 · Security Note
• https://t.me/cibsecurity/58470 · Telegram Post
• https://t.me/cvenotify/44600 · Telegram Post
• https://packages.debian.org/src:schism · Note
• https://t.me/cvenotify/115262 · Telegram Post