tocsin

Debian/snapcast: critical 9.8

An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive information via crafted request in JSON-RPC-API.

Action: Upgrade snapcast to 0.26.0+dfsg1-1+deb12u1 or later.

Affected

introducedfixedlast affected
00.26.0+dfsg1-1+deb12u1-

Fixed versions

0.26.0+dfsg1-1+deb12u1

Sources

published · modified · JSON