Skip to content
OpenAdvisories
High ELSA-2015-0767 2 CVEs

Important: flac security update (Oracle Linux 7)

Published Mar 31, 2015 · Updated Mar 31, 2015

Ecosystem: Oracle Linux

Summary

[1.3.0-5]
- fix buffer overflow when processing ID3v2 metadata (CVE-2014-8962)
- fix buffer overflow with invalid blocksize (CVE-2014-9028)

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 7 flac 0:1.3.0-5.el7_1
Oracle Linux · 7 flac-devel 0:1.3.0-5.el7_1
Oracle Linux · 7 flac-libs 0:1.3.0-5.el7_1

Vulnerabilities 2

  • Unscored —
    CVE-2014-8962

    Stack-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary co…

    flac flac Debian Ubuntu
  • Unscored —
    CVE-2014-9028

    Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary cod…

    flac flac Debian Ubuntu