CVE-2016-9961
game-music-emu before 0.6.1 mishandles unspecified integer values.
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Ubuntu (mittel).
Beschreibung
game-music-emu before 0.6.1 mishandles unspecified integer values.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 11 | game-music-emu | 0.6.0-4 |
| debian 12 | game-music-emu | 0.6.0-4 |
| debian 13 | game-music-emu | 0.6.0-4 |
| debian 14 | game-music-emu | 0.6.0-4 |
| debian 7 | game-music-emu | 0.5.5-2+deb7u1 |
| debian 8 | game-music-emu | 0.5.5-2+deb8u1 |
| echo | game-music-emu | 0.6.0-4 |
| ubuntu 12.04 | game-music-emu | 0.5.5-2ubuntu0.12.04.1 |
| ubuntu 14.04 | game-music-emu | 0.5.5-2ubuntu0.14.04.1 |
| ubuntu 14.04-ESM | game-music-emu | 0.5.5-2ubuntu0.14.04.1 |
| ubuntu 16.04 | game-music-emu | 0.6.0-3ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | game-music-emu | 0.6.0-3ubuntu0.16.04.1 |
Alle 13 Einträge aus 13 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 11 | game-music-emu | 0.6.0-4 |
| debian 12 | game-music-emu | 0.6.0-4 |
| debian 13 | game-music-emu | 0.6.0-4 |
| debian 14 | game-music-emu | 0.6.0-4 |
| debian 7 | game-music-emu | 0.5.5-2+deb7u1 |
| debian 8 | game-music-emu | 0.5.5-2+deb8u1 |
| echo | game-music-emu | 0.6.0-4 |
| ubuntu 12.04 | game-music-emu | 0.5.5-2ubuntu0.12.04.1 |
| ubuntu 14.04 | game-music-emu | 0.5.5-2ubuntu0.14.04.1 |
| ubuntu 14.04-ESM | game-music-emu | 0.5.5-2ubuntu0.14.04.1 |
| ubuntu 16.04 | game-music-emu | 0.6.0-3ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | game-music-emu | 0.6.0-3ubuntu0.16.04.1 |
| ubuntu 16.10 | game-music-emu | 0.6.0-3ubuntu0.16.10.1 |
Referenzen
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html
- http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html
- http://scarybeastsecurity.blogspot.de/2016/12/redux-compromising-linux-using-snes.html
- http://www.openwall.com/lists/oss-security/2016/12/15/1
- http://www.openwall.com/lists/oss-security/2016/12/15/11
- http://www.securityfocus.com/bid/95305
- https://bitbucket.org/mpyne/game-music-emu/wiki/Home
- https://bugzilla.redhat.com/show_bug.cgi?id=1405423
Alle 15 Referenzen
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6LKMKVYS7AVB2EXC463FUYN6C6FABHME/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7Z2OVERYM6NW3FGVGTJUNSL5ZNFSH2S/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GGHAQI5Q2XDSPGRRKPJJM3A73VWAFSFL/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QHFKIFSFIDXOKFUKAH2MBNXDTY6DYBF6/
- https://scarybeastsecurity.blogspot.cz/2016/12/redux-compromising-linux-using-snes.html
- https://security.gentoo.org/glsa/201707-02
- https://www.cve.org/CVERecord?id=CVE-2016-9961