An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuopl class in emuopl.cpp because of a destructor's two OPLDestroy calls, each of which frees TL_TABLE, SIN_TABLE, AMS_TABLE, and VIB_TABLE.

The remote Fedora 32 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-24ef21134b advisory.

  - An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuopl     class in emuopl.cpp because of a destructor's two OPLDestroy calls, each of which frees TL_TABLE,     SIN_TABLE, AMS_TABLE, and VIB_TABLE. (CVE-2018-17825)

  - AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::__bmf_convert_stream() in bmf.cpp.
    (CVE-2019-14690)

  - AdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader::load() in dtm.cpp. (CVE-2019-14691)

  - AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load() in mkj.cpp. (CVE-2019-14692)

  - AdPlug 2.3.1 has multiple heap-based buffer overflows in Ca2mLoader::load() in a2m.cpp. (CVE-2019-14732)

  - AdPlug 2.3.1 has multiple heap-based buffer overflows in CradLoader::load() in rad.cpp. (CVE-2019-14733)

  - AdPlug 2.3.1 has multiple heap-based buffer overflows in CmtkLoader::load() in mtk.cpp. (CVE-2019-14734)

  - AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h. (CVE-2019-15151)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-64168929e4 advisory.

  - An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuopl     class in emuopl.cpp because of a destructor's two OPLDestroy calls, each of which frees TL_TABLE,     SIN_TABLE, AMS_TABLE, and VIB_TABLE. (CVE-2018-17825)

  - AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::__bmf_convert_stream() in bmf.cpp.
    (CVE-2019-14690)

  - AdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader::load() in dtm.cpp. (CVE-2019-14691)

  - AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load() in mkj.cpp. (CVE-2019-14692)

  - AdPlug 2.3.1 has multiple heap-based buffer overflows in Ca2mLoader::load() in a2m.cpp. (CVE-2019-14732)

  - AdPlug 2.3.1 has multiple heap-based buffer overflows in CradLoader::load() in rad.cpp. (CVE-2019-14733)

  - AdPlug 2.3.1 has multiple heap-based buffer overflows in CmtkLoader::load() in mtk.cpp. (CVE-2019-14734)

  - AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h. (CVE-2019-15151)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

- Fix double-free in CEmuopl::~CEmuopl() (#1635881,     CVE-2018-17825)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
144965	Fedora 32 : adplug / audacious-plugins / ocp (2021-24ef21134b)	Nessus	Fedora Local Security Checks	critical
144964	Fedora 33 : adplug / audacious-plugins / ocp (2021-64168929e4)	Nessus	Fedora Local Security Checks	critical
120850	Fedora 29 : adplug (2018-de3a0ba76e)	Nessus	Fedora Local Security Checks	critical
120401	Fedora 28 : adplug (2018-4b8a18767b)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2018-17825

critical

Tenable Plugins

critical

critical

critical

critical