An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located buffer. Consequently, heap corruption may happen, and arbitrary code execution is not discarded. The complexity required to exploit this flaw is considered high as the payload must be validated by the MPEG decoder and the PCM synth before execution. Additionally, to successfully execute the attack, the user must scan through the stream, making web live stream content (such as web radios) a very unlikely attack vector.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:11242 advisory.

    * mpg123: Buffer overflow when writing decoded PCM samples (CVE-2024-10573)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-11242 advisory.

    - Rebase to 1.32.9, includes patch for CVE-2024-10573       Resolves: RHEL-65445

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-11193 advisory.

    - Rebase to 1.32.9, includes patch for CVE-2024-10573

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:11193 advisory.

    * mpg123: Buffer overflow when writing decoded PCM samples (CVE-2024-10573)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:11242 advisory.

    The mpg123 packages contain real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2, and 3 (most     commonly MPEG 1.0 layer 3 also known as MP3), as well as re-usable decoding and output libraries.

    Security Fix(es):

    * mpg123: Buffer overflow when writing decoded PCM samples (CVE-2024-10573)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:11193 advisory.

    The mpg123 packages contain real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2, and 3 (most     commonly MPEG 1.0 layer 3 also known as MP3), as well as re-usable decoding and output libraries.

    Security Fix(es):

    * mpg123: Buffer overflow when writing decoded PCM samples (CVE-2024-10573)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7092-2 advisory.

    USN-7092-1 fixed a vulnerability in mpg123. Bastien Roucaris discovered that the fix was incomplete on     Ubuntu 20.04 LTS. This update fixes the problem.

    We apologize for the inconvenience.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-3967 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3967-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                   Bastien Roucaris     November 26, 2024                             https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : mpg123     Version        : 1.26.4-1+deb11u1     CVE ID         : CVE-2024-10573     Debian Bug     : 1086443

    mpg123 a popular MPEG layer 1/2/3 audio player was afected     by a vulnerability.

    An out-of-bounds write flaw was found in mpg123 when handling crafted     streams. When decoding PCM, the libmpg123 may write past the end     of a heap-located buffer. Consequently, heap corruption may happen.

    For Debian 11 bullseye, this problem has been fixed in version     1.26.4-1+deb11u1.

    We recommend that you upgrade your mpg123 packages.

    For the detailed security status of mpg123 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/mpg123

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5811 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5811-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     November 11, 2024                     https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : mpg123     CVE ID         : CVE-2024-10573     Debian Bug     : 1086443

    An out-of-bounds write vulnerability when handling crafted streams was     discovered in mpg123, a real time MPEG 1.0/2.0/2.5 audio player/decoder     for layers 1, 2 and 3, which could result in the execution of arbitrary     code.

    For the stable distribution (bookworm), this problem has been fixed in     version 1.31.2-1+deb12u1.

    We recommend that you upgrade your mpg123 packages.

    For the detailed security status of mpg123 please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/mpg123

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7092-1 advisory.

    It was discovered that mpg123 incorrectly handled certain mp3 files. If a user or automated system were     tricked into opening a specially crafted mp3 file, a remote attacker could use this issue to cause mpg123     to crash, resulting in a denial of service, or possibly execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
213335	AlmaLinux 9 : mpg123:1.32.9 (ALSA-2024:11242)	Nessus	Alma Linux Local Security Checks	medium
213251	Oracle Linux 9 : mpg123:1.32.9 (ELSA-2024-11242)	Nessus	Oracle Linux Local Security Checks	medium
213196	Oracle Linux 8 : mpg123 (ELSA-2024-11193)	Nessus	Oracle Linux Local Security Checks	medium
213184	AlmaLinux 8 : mpg123 (ALSA-2024:11193)	Nessus	Alma Linux Local Security Checks	medium
213162	RHEL 9 : mpg123:1.32.9 (RHSA-2024:11242)	Nessus	Red Hat Local Security Checks	medium
213149	RHEL 8 : mpg123 (RHSA-2024:11193)	Nessus	Red Hat Local Security Checks	medium
211912	Ubuntu 20.04 LTS : mpg123 vulnerability (USN-7092-2)	Nessus	Ubuntu Local Security Checks	medium
211889	Debian dla-3967 : libmpg123-0 - security update	Nessus	Debian Local Security Checks	medium
210748	Debian dsa-5811 : libmpg123-0 - security update	Nessus	Debian Local Security Checks	medium
210368	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : mpg123 vulnerability (USN-7092-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2024-10573

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium