Stay Secure with the Latest Linux Advisories

security advisorycritical bugmemory leak

Mageia 9 MGASA-2023-0336 critical: audiofile memory leak exposure

The updated packages fix a security vulnerability In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo . MGASA-2023-0336 - Updated audiofile packages fix a security vulnerability Publication date: 04 Dec 2023 URL: https://advisories.mageia.org/MGASA-2023-0336.html Type: security Affected Mageia releases: 9 CVE: CVE-2023-24599 The updated packages fix a security vulnerability In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero bytes to truncate the data. (CVE-2022-24599) References: - https://bugs.mageia.org/show_bug.cgi?id=32561 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./message/WTETOUJNRR75REYJZTBGF6TAJZYTMXUY/ - https://www.cve.org/CVERecord?id=CVE-2023-24599 SRPMS: - 9/core/audiofile-0.3.6-12.1.mga9 . Mageia's latest audio file improvements address a potential memory leak vulnerability that risked the exposure of confidential information via specially crafted files.. Mageia Security Update, AudioFile Library Fix, Memory Leak Issue. . Severity: Critical. LinuxSecurity.com Team

Dec 04, 2023 •Critical Mageia