Logo
componentmpd
Name
mpd
Version
0.23.14
Type
library
Description
Music Player Daemon
Licenses
GPL-2.0-only
PURL
-
CPE
cpe:2.3:*:*:mpd:0.23.14:*:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
kirkstone
0.23.12
master
0.24.9

Patches#


#
Title
Author
Resolve
1
patch src_decoder_plugins_FfmpegIo.cxx
Markus Volk <f_l_k@t-online.de>

Vulnerabilities#


Name
Analysis
Description
False Positive
The PPP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted PPP authentication message to cause the daemon to read beyond allocated memory buffer, which would result in a denial of service condition.
False Positive
The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet with AVP Q.931 Cause Code to execute arbitrary code or cause a denial of service (memory corruption).