CVE-2008-5030

KRITISCH 10.0CVE-2008-5030 · Published 10/11/2008 · updated 16/06/2026

Kurz gesagt

CVE-2008-5030 ist eine Schwachstelle (KRITISCH (CVSS 10.0)) in libcaudio (libcaudio).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 4.9%, höher als bei 92.2% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
libcaudio libcaudio	`= 0.99.12p2`	No fix yet

Description

Heap-based buffer overflow in the cddb_read_disc_data function in cddb.c in libcdaudio 0.99.12p2 allows remote CDDB servers to execute arbitrary code via long CDDB data.

References

lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html
secunia.com/advisories/32678 · Vendor Advisory
secunia.com/advisories/34353 · Vendor Advisory
security.gentoo.org/glsa/glsa-200903-31.xml
sourceforge.net/tracker/index.php
debian.org/security/2008/dsa-1665
mandriva.com/security/advisories
openwall.com/lists/oss-security/2008/11/05/1
openwall.com/lists/oss-security/2008/11/07/1
openwall.com/lists/oss-security/2008/11/11/4
openwall.com/lists/oss-security/2008/11/11/6
securityfocus.com/bid/32122
vupen.com/english/advisories/2008/3132 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free