Red Hat Security AdvisoryRHSA-2023:5044
flac security update
Released 2023-09-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.4) flac-1.3.2-9.el8_4.1, flac-libs-1.3.2-9.el8_4.1
- Red Hat Enterprise Linux AppStream E4S (v.8.4) flac-1.3.2-9.el8_4.1, flac-libs-1.3.2-9.el8_4.1
- Red Hat Enterprise Linux AppStream TUS (v.8.4) flac-1.3.2-9.el8_4.1, flac-libs-1.3.2-9.el8_4.1
Fixes 1 record
Priority HIGH 69
Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00794 · Published 2023-08-22 · Partial fix CWE-120
