CVE-2019-15151
AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h.
Sévérité par source
Le label propre à Trivy est CRITICAL. Critique selon NVD, GHSA. Plus basse selon Ubuntu (moyenne).
Description
AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| nuget::GitHub Security Advisory NuGet | adplug | 2.3.3 |
| debian 10 | adplug | pas de correctif indiqué |
| debian 11 | adplug | 2.3.3+dfsg-2 |
| debian 12 | adplug | 2.3.3+dfsg-2 |
| debian 13 | adplug | 2.3.3+dfsg-2 |
| debian 14 | adplug | 2.3.3+dfsg-2 |
| debian 8 | adplug | pas de correctif indiqué |
| debian 9 | adplug | pas de correctif indiqué |
| echo | adplug | 2.3.3+dfsg-2 |
| ubuntu 18.04-ESM | adplug | pas de correctif indiqué |
| ubuntu 20.04-ESM | adplug | pas de correctif indiqué |
Références
- https://github.com/adplug/adplug
- https://github.com/adplug/adplug/commit/1a282a486a8e33fef3e15998bf6408d3515dc07e
- https://github.com/adplug/adplug/issues/91
- https://github.com/miller-alex/adplug/commit/8abb9328bf27dcbdafc67ade3e75af0ffd8f7633
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q32A64R2APAC5PXIMSYIEFDQX5AD4GAS
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q32A64R2APAC5PXIMSYIEFDQX5AD4GAS/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3PW6PLDTPSQQRHKTU2FB72SUB4Q66NE
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3PW6PLDTPSQQRHKTU2FB72SUB4Q66NE/