Описание
fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluid_synth_monopoly.c, that can be triggered when loading an invalid midi file.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| fluidsynth | fixed | 2.4.7+dfsg-1 | package | |
| fluidsynth | fixed | 2.4.4+dfsg-1+deb13u2 | trixie | package |
| fluidsynth | no-dsa | bookworm | package | |
| fluidsynth | postponed | bullseye | package |
Примечания
https://github.com/FluidSynth/fluidsynth/issues/1602
https://github.com/FluidSynth/fluidsynth/pull/1607
Fixed by: https://github.com/FluidSynth/fluidsynth/commit/45f2a79f4265dcc4f98cfbafdb10727fb1c0d411 (v2.4.7)
Связанные уязвимости
fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluid_synth_monopoly.c, that can be triggered when loading an invalid midi file.
fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluid_synth_monopoly.c, that can be triggered when loading an invalid midi file.
fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluid_synth_monopoly.c, that can be triggered when loading an invalid midi file.
Уязвимость компонента src/synth/fluid_synth_monopoly.c программного синтезатора FluidSynth, позволяющая нарушителю вызвать отказ в обслуживании