PatchTheCVEphiola vulnerabilities and fixes
Recent CVEs affecting phiola, with upgrade or downgrade steps. 4 tracked.
phiola has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-05-01. Highest priority: CVE-2024-33430 (score 54/100).
- CVE-2024-33431 MEDIUM 6.5 DOWNGRADE An issue in phiola/src/afilter/conv.c:115 of phiola v2.0-rc22 allows a remote attacker to cause a denial of se
- CVE-2024-33430 HIGH 8.8 DOWNGRADE An issue in phiola/src/afilter/pcm_convert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbit
- CVE-2024-33429 HIGH 7.1 DOWNGRADE Buffer-Overflow vulnerability at pcm_convert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arb
- CVE-2024-33428 HIGH 8.8 DOWNGRADE Buffer-Overflow vulnerability at conv.c:68 of stsaz phiola v2.0-rc22 allows a remote attacker to execute arbit
FAQ
How do I fix phiola vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is phiola being exploited right now?
None of the tracked phiola CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which phiola CVE should I patch first?
CVE-2024-33430 currently ranks highest (54/100): An issue in phiola/src/afilter/pcm_convert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbit.