Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 492
Alerts This Week
Warning Icon 1 492

Ubuntu 20.04 LTS USN-7092-2 critical: mpg123 DoS and code execution

ubuntu
Calendar Grey November 27, 2024
Scroller Ubuntu
Ubuntu 20.04 LTS mpg123 patch addresses vulnerabilities leading to potential remote crashes and code execution risks. Ensure your system is secure by applying the latest updates!
mpg123 could be made to crash or run programs as your login if it opened a specially crafted file.

Summary

mpg123 could be made to crash or run programs as your login if it opened a

specially crafted file.

Software Description:

- mpg123: MPEG layer 1/2/3 audio player

Details:

USN-7092-1 fixed a vulnerability in mpg123. Bastien Roucariès discovered

that the fix was incomplete on Ubuntu 20.04 LTS. This update fixes the

problem.

We apologize for the inconvenience.

Original advisory details:

It was discovered that mpg123 incorrectly handled certain mp3 files. If a

user or automated system were tricked into opening a specially crafted mp3

file, a remote attacker could use this issue to cause mpg123 to crash,

resulting in a denial of service, or possibly execute arbitrary code.

Topics%20covered

Topics Covered

security advisory code execution DoS Ubuntu mpg123

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS
   libmpg123-0                     1.25.13-1ubuntu0.2
   mpg123                          1.25.13-1ubuntu0.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7092-2

https://ubuntu.com/security/notices/USN-7092-1

CVE-2024-10573, https://bugs.launchpad.net/ubuntu/+source/mpg123/+bug/2089680

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7092-2

Topics%20covered

Topics Covered

security advisory code execution DoS Ubuntu mpg123

Package Information

https://launchpad.net/ubuntu/+source/mpg123/1.25.13-1ubuntu0.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.