Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debianDebianDEBIAN:DLA-1961-1:A2753
HistoryOct 21, 2019 - 2:14 p.m.

[SECURITY] [DLA 1961-1] milkytracker security update

2019-10-2114:14:34
lists.debian.org
50

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7

Confidence

High

EPSS

0.001

Percentile

46.3%

JSON

Package : milkytracker
Version : 0.90.85+dfsg-2.2+deb8u1
CVE ID : CVE-2019-14464 CVE-2019-14496 CVE-2019-14497
Debian Bug : 933964

Fredric discovered a couple of buffer overflows in MilkyTracker, of which,
a brief description is given below.

CVE-2019-14464

XMFile::read in XMFile.cpp in milkyplay in MilkyTracker had a heap-based
buffer overflow.

CVE-2019-14496

LoaderXM::load in LoaderXM.cpp in milkyplay in MilkyTracker had a
stack-based buffer overflow.

CVE-2019-14497

ModuleEditor::convertInstrument in tracker/ModuleEditor.cpp in MilkyTracker
had a heap-based buffer overflow.

For Debian 8 "Jessie", these problems have been fixed in version
0.90.85+dfsg-2.2+deb8u1.

We recommend that you upgrade your milkytracker packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
Attachment:
signature.asc
Description: PGP signature

OSVersionArchitecturePackageVersionFilename
Debian8armhfmilkytracker< 0.90.85+dfsg-2.2+deb8u1milkytracker_0.90.85+dfsg-2.2+deb8u1_armhf.deb
Debian10s390xmilkytracker< 1.02.00+dfsg-1+deb10u1milkytracker_1.02.00+dfsg-1+deb10u1_s390x.deb
Debian10mipselmilkytracker-dbgsym< 1.02.00+dfsg-1+deb10u1milkytracker-dbgsym_1.02.00+dfsg-1+deb10u1_mipsel.deb
Debian9allmilkytracker< 0.90.86+dfsg-2+deb9u1milkytracker_0.90.86+dfsg-2+deb9u1_all.deb
Debian10armhfmilkytracker< 1.02.00+dfsg-1+deb10u1milkytracker_1.02.00+dfsg-1+deb10u1_armhf.deb
Debian10amd64milkytracker-dbgsym< 1.02.00+dfsg-1+deb10u1milkytracker-dbgsym_1.02.00+dfsg-1+deb10u1_amd64.deb
Debian10armhfmilkytracker-dbgsym< 1.02.00+dfsg-1+deb10u1milkytracker-dbgsym_1.02.00+dfsg-1+deb10u1_armhf.deb
Debian10allmilkytracker< 1.02.00+dfsg-1+deb10u1milkytracker_1.02.00+dfsg-1+deb10u1_all.deb
Debian10i386milkytracker-dbgsym< 1.02.00+dfsg-1+deb10u1milkytracker-dbgsym_1.02.00+dfsg-1+deb10u1_i386.deb
Debian10mipsmilkytracker< 1.02.00+dfsg-1+deb10u1milkytracker_1.02.00+dfsg-1+deb10u1_mips.deb
Rows per page:
1-10 of 321

Related

osv 6
openvas 5
ubuntu 1
nessus 5
debian 1
prion 3
debiancve 3
cvelist 3
veracode 3
nvd 3
cve 3
fedora 2
ubuntucve 3
osv
osv
milkytracker - security update
2019-10-21 00:00:00
MilkyTracker vulnerabilities
2020-09-15 19:00:53
milkytracker - security update
2020-07-27 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4499-1)
2020-09-16 00:00:00
Debian: Security Advisory (DLA-1961-1)
2019-10-22 00:00:00
Debian: Security Advisory (DLA-2292-1)
2020-07-28 00:00:00
ubuntu
ubuntu
MilkyTracker vulnerabilities
2020-09-15 00:00:00
nessus
nessus
Ubuntu 16.04 LTS : MilkyTracker vulnerabilities (USN-4499-1)
2020-09-15 00:00:00
Debian DLA-1961-1 : milkytracker security update
2019-10-22 00:00:00
Debian DLA-2292-1 : milkytracker security update
2020-07-28 00:00:00
debian
debian
[SECURITY] [DLA 2292-1] milkytracker security update
2020-07-27 14:20:23
prion
prion
Stack overflow
2019-08-01 18:15:00
Heap overflow
2019-08-01 18:15:00
Heap overflow
2019-07-31 23:15:00
debiancve
debiancve
CVE-2019-14496
2019-08-01 18:15:11
CVE-2019-14497
2019-08-01 18:15:11
CVE-2019-14464
2019-07-31 23:15:11
cvelist
cvelist
CVE-2019-14496
2019-08-01 17:28:16
CVE-2019-14497
2019-08-01 17:28:27
CVE-2019-14464
2019-07-31 22:40:32
veracode
veracode
Buffer Overflow
2020-12-06 04:28:08
Denial Of Service (DoS)
2020-12-06 04:27:34
Arbitrary Code Execution
2020-12-06 04:28:08
nvd
nvd
CVE-2019-14497
2019-08-01 18:15:11
CVE-2019-14496
2019-08-01 18:15:11
CVE-2019-14464
2019-07-31 23:15:11
cve
cve
CVE-2019-14497
2019-08-01 18:15:11
CVE-2019-14464
2019-07-31 23:15:11
CVE-2019-14496
2019-08-01 18:15:11
fedora
fedora
[SECURITY] Fedora 31 Update: milkytracker-1.02.00-5.fc31
2019-12-03 01:10:44
[SECURITY] Fedora 30 Update: milkytracker-1.02.00-4.fc30
2019-12-02 19:11:14
ubuntucve
ubuntucve
CVE-2019-14497
2019-08-01 00:00:00
CVE-2019-14464
2019-07-31 00:00:00
CVE-2019-14496
2019-08-01 00:00:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7

Confidence

High

EPSS

0.001

Percentile

46.3%

JSON
Related for DEBIAN:DLA-1961-1:A2753
osv6openvas5ubuntu1nessus5debian1prion3debiancve3cvelist3veracode3nvd3cve3fedora2ubuntucve3