CVE-2005-0087 — Alsa-lib vulnerability

7 documents6 sources
Severity
4.6MEDIUMNVD
EPSS
0.1%
top 73.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Alsa-project Alsa-libDebian Alsa-libRedhat Enterprise Linux
Timeline
PublishedApr 27
Latest updateMay 1

Description

The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execute arbitrary code if there are other vulnerabilities in the library.

CVSS vector

AV:L/AC:L/C:P/I:P/A:PExploitability: 3.9 | Impact: 6.4

Affected Packages3 packages

▶debiandebian/alsa-lib< alsa-lib 1.0.9-1 (bookworm)
▶Debianalsa-project/alsa-lib< 1.0.9-1+3

Also affects: Enterprise Linux 4.0

🔴Vulnerability Details

2
GHSA
GHSA-6mvg-c283-q7q6: The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound↗2022-05-01
▶
OSV
CVE-2005-0087: The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound↗2005-04-27
▶

📋Vendor Advisories

2
Red Hat
security flaw↗2005-02-15
▶
Debian
CVE-2005-0087: alsa-lib - The alsa-lib package in Red Hat Linux 4 disables stack protection for the libaso...↗2005
▶

💬Community

2
Bugzilla
CVE-2005-0087 security flaw↗2018-08-16
▶
Bugzilla
CAN-2005-0087 alsa-lib disables stack protection for it's users↗2005-01-07
▶