Vendor/product archive

alsa-project / alsa CVEs

Beta · best-effort

2 CVEs tagged to alsa-project / alsa — 0 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to alsa-project vendor archive

CVE-2009-0035

Published Nov 9, 2019

alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts.

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-13351

Published Jul 5, 2019

posix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 (as distributed with alsa-plugins 1.1.7 and later) has a "double file descriptor close" issue during a failed connect…

CVSS 8.1 · High

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1