Description
Buffer overflow in the fun_ladd function in funmath.cpp in TinyMUX before 20070126 might allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors related to lists of numbers.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | tinymux | 2.4.3.31-1.1 | — |
| Debian 13 | tinymux | 2.4.3.31-1.1 | — |
| Debian 12 | tinymux | 2.4.3.31-1.1 | — |
| Debian 4.0 | tinymux | 2.4.3.31-1etch1 | DSA-1317-1 |
Advisories 1
- DSA-1317-1 tinymux Debian Security (DSA / DLA) · Mar 9, 2026
References
- 34686 vdb-entry
- ADV-2007-1213 vdb-entry
- 25784 third-party-advisory
- http://code.google.com/p/tinymux/issues/detail?id=282&can=2&q=
- 24733 third-party-advisory
- DSA-1317 vendor-advisory
- 23292 vdb-entry
- http://www.tinymux.org/changes.txt