Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Mageia 7 MGASA-2020-0179 Critical: MP3Gain Buffer Overflow Exploit

mageia
Calendar Grey April 24, 2020
Dist Mageia Esm H88
The latest Mageia mp3gain packages resolve a critical vulnerability leading to potential remote denial of service. Key patch specifics are detailed herein.
The updated package fixes a security vulnerability: A buffer over-read was discovered in ReadMP3APETag in apetag.c in MP3Gain 1.6.2

Summary

The updated package fixes a security vulnerability:
A buffer over-read was discovered in ReadMP3APETag in apetag.c in MP3Gain 1.6.2. The vulnerability causes an application crash, which leads to remote denial of service. (CVE-2019-18359)

References

- https://bugs.mageia.org/show_bug.cgi?id=26504

- - https://www.cve.org/CVERecord?id=CVE-2019-18359

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow mageia mp3gain

Resolution

SRPMS

- 7/core/mp3gain-1.6.2-2.1.mga7

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 24 Apr 2020
URL: https://advisories.mageia.org/MGASA-2020-0179.html
Type: security
CVE: CVE-2019-18359

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow mageia mp3gain

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here