ALSA Project

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

ALSA Project records in CISA KEV

No ALSA Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Alsa 2 records LOW Alsa-lib 1 record LOW

Records

2 records in Alsa · all components

TI-2019-10031 CVE-2019-13351 · GHSA-cjwm-ffg5-vxwh

posix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 (as distributed with…

LOW 39

posix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 (as distributed with alsa-plugins 1.1.7 and later) has a "double file descriptor close" issue during a failed connection attempt when jackd2 is not running.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01692 Published 2019-07-05 No fix listed

TI-2009-00035 CVE-2009-0035 · GHSA-37pq-pqpw-f637

Link following in alsa-driver

LOW 25

alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00468 Published 2019-11-09 No fix listed CWE-59

Open these records in search →

Critical	0
High	2
Medium	6
Low	0
No CVSS	0