Name
mpd
Version
0.23.14
Type
library
Description
Music Player Daemon
Licenses
GPL-2.0-only
PURL
-
CPE
cpe:2.3:*:*:mpd:0.23.14:*:*:*:*:*:*:*
Other Versions#
Patches#
#
Title
Author
Resolve
1
patch src_decoder_plugins_FfmpegIo.cxx
Markus Volk <f_l_k@t-online.de>
Vulnerabilities#
Name
Analysis
Description
False Positive
The PPP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted PPP authentication message to cause the daemon to read beyond allocated memory buffer, which would result in a denial of service condition.
False Positive
The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet with AVP Q.931 Cause Code to execute arbitrary code or cause a denial of service (memory corruption).