Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 3 articles for you...
100
security advisorymoderatebuffer overflowSUSE: 2018:1441-1 Moderate: libmodplug Memory Overflow Issues
An update that fixes two vulnerabilities is now available. . SUSE Security Update: Security update for libmodplug ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:1441-1 Rating: moderate References: #1022032 Cross-References: CVE-2013-4233 CVE-2013-4234 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Desktop 12-SP3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libmodplug fixes the following issues: - Update to version 0.8.9.0+git20170610.f6dd59a bsc#1022032: * PSM: add missing line to commit * ABC: prevent possible increment of p past end * ABC: ensure read pointer is valid before incrementing * ABC: terminate early when things don't work in substitute * OKT: add one more bound check * FAR: out by one on check * ABC: 10 digit ints require null termination * PSM: make sure reads occur of only valid ins * ABC: cleanup tracks correctly. * WAV: check that there is space for both headers * OKT: ensure file size is enough to contain data * ABC: initialize earlier * ABC: ensure array access is bounded correctly. * ABC: clean up loop exiting code * ABC: avoid possibility of incrementing *p * ABC: abort early if macro would be blank * ABC: Use blankline more often * ABC: Ensure for loop does not increment past end of loop * Initialize nPatterns to 0 earlier * Check memory position isn't over the memory length * ABC: transpose only needs to look at notes (
May 28, 2018
SuSE
87
security advisorycode executiondebianDebian: DSA-2751-1 Critical Risk: Libmodplug Code Execution Threat
Several vulnerabilities have been discovered in libmodplug, a library for mod music based on ModPlug, that might allow arbitrary code execution when processing specially-crafted ABC files through applications using the library, such as media players. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2751-1
Sep 04, 2013
•Critical
Debian
87
security advisorymoderatebuffer overflowDebian: DSA-2415-1 Moderate: Libmodplug Buffer Overflows Exploit Risk
Several vulnerabilities that can lead to the execution of arbitrary code have been discovered in libmodplug, a library for mod music based on ModPlug. The Common Vulnerabilities and Exposures project identifies the following issues: . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2415-1
Feb 22, 2012
•Important
Debian
172
security advisorymoderatedenial of serviceUbuntu 11.10: 1255-1 Moderate: libmodplug Denial Of Service
libmodplug could be made to crash or run programs as your login if it opened a specially crafted file.. =========================================================================Ubuntu Security Notice USN-1255-1 November 09, 2011 libmodplug vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 11.10 - Ubuntu 11.04 - Ubuntu 10.10 - Ubuntu 10.04 LTS Summary: libmodplug could be made to crash or run programs as your login if it opened a specially crafted file. Software Description: - libmodplug: Library for mod music based on ModPlug Details: Hossein Lotfi discovered that libmodplug did not correctly handle certain malformed media files. If a user or automated system were tricked into opening a crafted media file, an attacker could cause a denial of service or possibly execute arbitrary code with privileges of the user invoking the program. (CVE-2011-2911, CVE-2011-2912, CVE-2011-2913) It was discovered that libmodplug did not correctly handle certain malformed media files. If a user or automated system were tricked into opening a crafted media file, an attacker could cause a denial of service or possibly execute arbitrary code with privileges of the user invoking the program. (CVE-2011-2914, CVE-2011-2915) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 11.10: libmodplug1 1:0.8.8.2-3ubuntu1.1 Ubuntu 11.04: libmodplug1 1:0.8.8.1-2ubuntu0.3 Ubuntu 10.10: libmodplug1 1:0.8.8.1-1ubuntu1.3 Ubuntu 10.04 LTS: libmodplug0c2 1:0.8.7-1ubuntu0.3 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-1255-1 CVE-2011-2911, CVE-2011-2912, CVE-2011-2913, CVE-2011-2914, CVE-2011-2915 Package Information: https://launchpad.net/ubuntu/+source/libmodplug/1:0.8.8.2-3ubuntu1.1 https://launchpad.net/ubuntu/+source/libmodplug/1:0.8.8.1-2ubuntu0.3 https://launchpad.net/ubuntu/+source/libmodplug/1:0.8.8.1-1ubuntu1.3 https://launchpad.net/ubuntu/+source/libmodplug/1:0.8.7-1ubuntu0.3 . Ubuntu Security Announcement USN-1256-1 addresses critical vulnerabilities in libjpeg that could lead to unexpected behavior or unauthorized access.. Libmodplug Threats, Ubuntu Security Updates, Denial Of Service, Security Advisories. . LinuxSecurity.com Team
Nov 09, 2011
Ubuntu
202
security advisorybuffer overflowmemory corruptionopenSUSE 11.4: 2011:0943-1 Important: Libmodplug Critical Updates
An update that fixes 6 vulnerabilities is now available. It An update that fixes 6 vulnerabilities is now available. It An update that fixes 6 vulnerabilities is now available. It includes one version update. includes one version update.. openSUSE Security Update: libmodplug: Fixed multiple vulnerabilities reported in
Aug 24, 2011
•Important
OpenSUSE
172
security advisorydenial of servicesecurity issueUbuntu 11.04, 10.10, 10.04 LTS USN-1148-1 Moderate: libmodplug Code Risk
libmodplug could be made to run programs as your login if it opened a specially crafted file.. =========================================================================Ubuntu Security Notice USN-1148-1 June 13, 2011 libmodplug vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 11.04 - Ubuntu 10.10 - Ubuntu 10.04 LTS Summary: libmodplug could be made to run programs as your login if it opened a specially crafted file. Software Description: - libmodplug: Library for mod music based on ModPlug Details: It was discovered that libmodplug did not correctly handle certain malformed S3M media files. If a user or automated system were tricked into opening a crafted S3M file, an attacker could cause a denial of service or possibly execute arbitrary code with privileges of the user invoking the program. (CVE-2011-1574) It was discovered that libmodplug did not correctly handle certain malformed ABC media files. If a user or automated system were tricked into opening a crafted ABC file, an attacker could cause a denial of service or possibly execute arbitrary code with privileges of the user invoking the program. (CVE-2011-1761) The default compiler options for affected releases should reduce the vulnerability to a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 11.04: libmodplug1 1:0.8.8.1-2ubuntu0.2 Ubuntu 10.10: libmodplug1 1:0.8.8.1-1ubuntu1.2 Ubuntu 10.04 LTS: libmodplug0c2 1:0.8.7-1ubuntu0.2 In general, a standard system update will make all the necessary changes. References: CVE-2011-1574, CVE-2011-1761 Package Information: https://launchpad.net/ubuntu/+source/libmodplug/1:0.8.8.1-2ubuntu0.2 https://launchpad.net/ubuntu/+source/libmodplug/1:0.8.8.1-1ubuntu1.2 https://launchpad.net/ubuntu/+source/libmodplug/1:0.8.7-1ubuntu0.2 . The Ubuntu Security Notice USN-1148-1 outlines critical vulnerabilities in libmodplug, impacting various releases and posing significant security concerns.. libmodplug vulnerabilities, Ubuntu advisory, security notice. . LinuxSecurity.com Team
Jun 13, 2011
Ubuntu
87
security advisorybuffer overflowremote exploitDebian: DSA-2226-1 Critical: Libmodplug Buffer Overflow Exploit
M. Lucinskij and P. Tumenas discovered a buffer overflow in the code for processing S3M tracker files in the Modplug tracker music library, which may result in the execution of arbitrary code. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2226-1
Apr 26, 2011
•Critical
Debian
87
security advisorybuffer overflowcriticalDebian Lenny: DSA-1850-1 Critical: Libmodplug Buffer Overflow
Several vulnerabilities have been discovered in libmodplug, the shared libraries for mod music based on ModPlug. The Common Vulnerabilities and Exposures project identifies the following problems: . - ------------------------------------------------------------------------ Debian Security Advisory DSA-1850-1
Aug 04, 2009
•Critical
Debian
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!