PatchTheCVEalsaplayer vulnerabilities and fixes
Recent CVEs affecting alsaplayer, with upgrade or downgrade steps. 3 tracked.
alsaplayer has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2007-10-09. Highest priority: CVE-2007-5301 (score 53/100).
- CVE-2007-5301 MEDIUM 6.8 UPGRADE Buffer overflow in the vorbis_stream_info function in input/vorbis/vorbis_engine.c (aka the vorbis input plugi
- CVE-2006-4089 MEDIUM 5.0 UPGRADE Multiple buffer overflows in Andy Lo-A-Foe AlsaPlayer 0.99.76 and earlier allow remote attackers to cause a de
- CVE-2002-1896 HIGH 7.2 DOWNGRADE Buffer overflow in Alsaplayer 0.99.71, when installed setuid root, allows local users to execute arbitrary cod
FAQ
How do I fix alsaplayer vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is alsaplayer being exploited right now?
None of the tracked alsaplayer CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which alsaplayer CVE should I patch first?
CVE-2007-5301 currently ranks highest (53/100): Buffer overflow in the vorbis_stream_info function in input/vorbis/vorbis_engine.c (aka the vorbis input plugi.