Vendor archive

alsa-project CVEs

Beta · best-effort

3 CVEs tagged to vendor alsa-project — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2009-0035

Published Nov 9, 2019

alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts.

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-13351

Published Jul 5, 2019

posix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 (as distributed with alsa-plugins 1.1.7 and later) has a "double file descriptor close" issue during a failed connect…

CVSS 8.1 · High

Vendor/product tagsBeta · best-effort

CVE-2005-0087

Published Apr 27, 2005

The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execute arbitrary code if there are other vu…

CVSS 4.6 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1