Most recent entries from all

ALSA-2023:5046 — Important: flac security update

Affected: AlmaLinux:8: flac, AlmaLinux:8: flac-devel, AlmaLinux:8: flac-libs

FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files.

Security Fix(es):

* flac: Remote Code Execution (RCE) via the bitwriter_grow_ function, by supplying crafted input to the encoder (CVE-2020-22219)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2023-06152

EUVD-2026-191999

fkie_cve-2020-22219

Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.

GHSA-hvp4-qmrj-gvhf

Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.

gsd-2020-22219

msrc_CVE-2020-22219 — Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary…

msrc_CVE-2020-22219

OESA-2023-1562 — flac security update

Affected: openEuler:20.03-LTS-SP1: flac, openEuler:20.03-LTS-SP3: flac, openEuler:22.03-LTS: flac, openEuler:22.03-LTS-SP1: flac, openEuler:22.03-LTS-SP2: flac

document files for flac Security Fix(es): Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.(CVE-2020-22219)

RHSA-2023:5042 — Red Hat Security Advisory: flac security update

flac: Remote Code Execution (RCE) via the bitwriter_grow_ function, by supplying crafted input to the encoder

RHSA-2023:5046 — Red Hat Security Advisory: flac security update

flac: Remote Code Execution (RCE) via the bitwriter_grow_ function, by supplying crafted input to the encoder

RLSA-2023:5048 — Important: flac security update

Affected: Rocky Linux:9: flac

Security Fix(es):

* flac: Remote Code Execution (RCE) via the bitwriter_grow_ function, by supplying crafted input to the encoder (CVE-2020-22219)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

UBUNTU-CVE-2020-22219

Affected: Ubuntu:Pro:14.04:LTS: flac, Ubuntu:Pro:16.04:LTS: flac, Ubuntu:Pro:18.04:LTS: flac, Ubuntu:20.04:LTS: flac, Ubuntu:22.04:LTS: flac

Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.

WID-SEC-W-2023-2306 — Red Hat Enterprise Linux: Schwachstelle ermöglicht Codeausführung

Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen.