Summary
It was discovered that mpg123 failed to handle certain malformed mp3 files.
An attacker could use this vulnerability to potentially leak sensitive
information or cause a crash.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | mpg123 | 1.16.0-1ubuntu1.1+esm2 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | mpg123 | 1.22.4-1ubuntu0.1+esm2 |
Vulnerabilities 4
-
Unscored —
The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows remote attackers to cause a denial of s…
-
Unscored —
Integer overflow in the INT123_parse_new_id3 function in the ID3 parser in mpg123 before 1.25.5 on 32-bit platforms all…
-
Unscored —
A heap-based buffer over-read in the getbits function in src/libmpg123/getbits.h in mpg123 through 1.25.5 allows remote…
-
Unscored —
The next_text function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote attackers to cause a denial of service (bu…