NA

CVE-2020-22219

Published: 22/08/2023 Updated: 07/11/2023
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 0

Vulnerability Summary

Buffer Overflow vulnerability in function bitwriter_grow_ in flac prior to 1.4.0 allows remote malicious users to run arbitrary code via crafted input to the encoder.

Vulnerable Product Search on Vulmon Subscribe to Product

flac project flac

Vendor Advisories

A buffer overflow was discovered in flac, a library handling Free Lossless Audio Codec media, which could potentially result in the execution of arbitrary code For the oldstable distribution (bullseye), this problem has been fixed in version 133-2+deb11u2 We recommend that you upgrade your flac packages For the detailed security status of flac ...
Synopsis Important: Migration Toolkit for Applications security and bug fix update Type/Severity Security Advisory: Important Topic Migration Toolkit for Applications 621 releaseRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score, which gives a deta ...
Synopsis Important: flac security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for flac is now available for Red Hat Enterprise Linux 90 Extended Update SupportRed Hat Product Security has rated this ...
Synopsis Important: flac security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for flac is now available for Red Hat Enterprise Linux 86 Extended Update SupportRed Hat Product Security has rated this ...
Synopsis Important: flac security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for flac is now available for Red Hat Enterprise Linux 82 Advanced Update Support, Red Hat Enterprise Linux 82 Telecommu ...
Synopsis Important: flac security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for flac is now available for Red Hat Enterprise Linux 81 Update Services for SAP SolutionsRed Hat Product Security has ...
Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 140 allows remote attackers to run arbitrary code via crafted input to the encoder (CVE-2020-22219) ...
Description<!---->A flaw was found in the libeconf library This issue occurs due to a buffer overflow vulnerability in the bitwriter_grow_ function in FLAC that allows remote attackers to run arbitrary code via crafted input to the encoderA flaw was found in the libeconf library This issue occurs due to a buffer overflow vulnerability in the bit ...