{"action":"Upgrade jackd2 to 1.9.14~dfsg-0.1 or later.","affected":[{"fixed":"1.9.14~dfsg-0.1","introduced":"0"}],"component":"jackd2","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["1.9.14~dfsg-0.1"],"id":"tcs_01M5NDSP78P071ZM37J6WSRZD8","modified_at":"2026-09-21T07:02:19.016832213Z","published_at":"2019-07-05T20:15:14.200Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2019-13351","https://security-tracker.debian.org/tracker/CVE-2019-13351"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2019-13351","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2019-13351"}],"summary":"posix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 (as distributed with alsa-plugins 1.1.7 and later) has a \"double file descriptor close\" issue during a failed connection attempt when jack"}