An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and application crash, which leads to denial of service in the book 8 case.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in     Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and     application crash, which leads to denial of service in the book 8 case. (CVE-2018-19886)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in
    Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and
    application crash, which leads to denial of service in the book 8 case. (CVE-2018-19886)

The remote host is affected by the vulnerability described in GLSA-202208-16 (faac: Denial of service)

  - An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in     Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and     application crash, which leads to denial of service in the book 8 case. (CVE-2018-19886)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
257138	Linux Distros Unpatched Vulnerability : CVE-2018-19886	Nessus	Misc.	medium
404280	Alpine: multiple faac packages: security update to 1.30-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
404280	Alpine: multiple faac packages: security update to 1.30-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
400423	Alpine: multiple faac packages: security update to 1.29.9.2-r0 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
400423	Alpine: multiple faac packages: security update to 1.29.9.2-r0 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
164047	GLSA-202208-16 : faac: Denial of service	Nessus	Gentoo Local Security Checks	medium

Detections

Analytics

CVE-2018-19886

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium