Detections
Analytics

GLSA-201707-02 : Game Music Emu: Multiple vulnerabilities

critical Nessus Plugin ID 101333

Language:

Synopsis

The remote Gentoo host is missing one or more security-related patches.

Description

The remote host is affected by the vulnerability described in GLSA-201707-02 (Game Music Emu: Multiple vulnerabilities)

 Multiple vulnerabilities have been discovered in Game Music Emu. Please review the CVE identifiers referenced below for details.
 Impact :

 A remote attacker could entice a user to open a specially crafted SPC music file, using Game Music Emu or an application linked against the Game Music Emu library, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.
 Workaround :

 There is no known workaround at this time.

Solution

All Game Music Emu users should upgrade to the latest version:
 # emerge --sync # emerge --ask --oneshot --verbose '>=media-libs/game-music-emu-0.6.1'

See Also

https://security.gentoo.org/glsa/201707-02

Plugin Details

Severity: Critical

ID: 101333

File Name: gentoo_GLSA-201707-02.nasl

Version: 3.3

Type: local

Published: 7/10/2017

Updated: 1/11/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Critical

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vulnerability Information

CPE: p-cpe:/a:gentoo:linux:game-music-emu, cpe:/o:gentoo:linux

Required KB Items: Host/local_checks_enabled, Host/Gentoo/release, Host/Gentoo/qpkg-list

Patch Publication Date: 7/8/2017

Reference Information

CVE: CVE-2016-9957, CVE-2016-9958, CVE-2016-9959, CVE-2016-9960, CVE-2016-9961

GLSA: 201707-02