AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::__bmf_convert_stream() in bmf.cpp.

The remote Fedora 32 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-24ef21134b advisory.

  - An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuopl     class in emuopl.cpp because of a destructor's two OPLDestroy calls, each of which frees TL_TABLE,     SIN_TABLE, AMS_TABLE, and VIB_TABLE. (CVE-2018-17825)

  - AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::__bmf_convert_stream() in bmf.cpp.
    (CVE-2019-14690)

  - AdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader::load() in dtm.cpp. (CVE-2019-14691)

  - AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load() in mkj.cpp. (CVE-2019-14692)

  - AdPlug 2.3.1 has multiple heap-based buffer overflows in Ca2mLoader::load() in a2m.cpp. (CVE-2019-14732)

  - AdPlug 2.3.1 has multiple heap-based buffer overflows in CradLoader::load() in rad.cpp. (CVE-2019-14733)

  - AdPlug 2.3.1 has multiple heap-based buffer overflows in CmtkLoader::load() in mtk.cpp. (CVE-2019-14734)

  - AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h. (CVE-2019-15151)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-64168929e4 advisory.

  - An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuopl     class in emuopl.cpp because of a destructor's two OPLDestroy calls, each of which frees TL_TABLE,     SIN_TABLE, AMS_TABLE, and VIB_TABLE. (CVE-2018-17825)

  - AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::__bmf_convert_stream() in bmf.cpp.
    (CVE-2019-14690)

  - AdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader::load() in dtm.cpp. (CVE-2019-14691)

  - AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load() in mkj.cpp. (CVE-2019-14692)

  - AdPlug 2.3.1 has multiple heap-based buffer overflows in Ca2mLoader::load() in a2m.cpp. (CVE-2019-14732)

  - AdPlug 2.3.1 has multiple heap-based buffer overflows in CradLoader::load() in rad.cpp. (CVE-2019-14733)

  - AdPlug 2.3.1 has multiple heap-based buffer overflows in CmtkLoader::load() in mtk.cpp. (CVE-2019-14734)

  - AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h. (CVE-2019-15151)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Malvineous on Github reports :

This release fixes the following security issues :

- buffer overflow in .bmf

- buffer overflow in .dtm

- buffer overflow in .mkj

- buffer overflow in .a2m

- buffer overflow in .rad

- buffer overflow in .mtk

- double free and OOB reads in .u6m

ID	Name	Product	Family	Severity
144965	Fedora 32 : adplug / audacious-plugins / ocp (2021-24ef21134b)	Nessus	Fedora Local Security Checks	critical
144964	Fedora 33 : adplug / audacious-plugins / ocp (2021-64168929e4)	Nessus	Fedora Local Security Checks	critical
137344	FreeBSD : libadplug -- Various vulnerabilities (329ecd60-aaf7-11ea-8659-10bf48e1088e)	Nessus	FreeBSD Local Security Checks	critical

Detections

Analytics

CVE-2019-14690

high

Tenable Plugins

critical

critical

critical