Description
Buffer overflow in the PATinst function in src/load_pat.cpp in libmodplug before 0.8.7 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long instrument name.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | libmodplug | 1:0.8.7-1 | — |
| Debian 13 | libmodplug | 1:0.8.7-1 | — |
| Debian 12 | libmodplug | 1:0.8.7-1 | — |
| Debian 5.0 | libmodplug | 1:0.8.4-1+lenny1 | DSA-1850-1 |
| Debian 4.0 | libmodplug | 1:0.7-5.2+etch1 | DSA-1850-1 |
Advisories 1
- DSA-1850-1 libmodplug - arbitrary code execution Debian Security (DSA / DLA) · Mar 9, 2026
References
- USN-771-1 vendor-advisory
- 35736 third-party-advisory
- 34927 third-party-advisory
- DSA-1850 vendor-advisory
- 34747 vdb-entry
- http://modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xmms/libmodplug/src/load_pat.cpp?r1=1.3&r2=1.4
- 36158 third-party-advisory
- http://sourceforge.net/tracker/?func=detail&aid=2777467&group_id=1275&atid=301275
- MDVSA-2009:128 vendor-advisory
- 54109 vdb-entry
- 35026 third-party-advisory
- [oss-security] 20090429 Re: CVE Request -- libmodplug mailing-list
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526084
- GLSA-200907-07 vendor-advisory
- http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms%3Ba=commitdiff%3Bh=c4ebb701be6ee9a296a44fdac5a20b7739ff0595
- http://sourceforge.net/project/shownotes.php?release_id=678622&group_id=1275
- ADV-2009-1200 vdb-entry