Debian/shairport-sync: critical 9.8
An exploitable heap overflow vulnerability exists in the tinysvcmdns library version 2016-07-18. A specially crafted packet can make the library overwrite an arbitrary amount of data on the heap with
Action: Upgrade shairport-sync to 3.1.4-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.4-1 | - |
Fixed versions
| 3.1.4-1 |
Sources
published · modified · JSON