Debian/mpg321: medium 5.5
The scan() function in mad.c in mpg321 0.3.2 allows remote attackers to trigger an out-of-bounds write via a zero bitrate in an MP3 file.
Action: Upgrade mpg321 to 0.3.2-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.2-2 | - |
Fixed versions
| 0.3.2-2 |
Sources
- osv: DEBIAN-CVE-2019-14247#Debian:14/mpg321
- https://security-tracker.debian.org/tracker/CVE-2019-14247
published · modified · JSON