AdPlug 2.3.1 has multiple heap-based buffer overflows in CmtkLoader::load() in mtk.cpp.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - AdPlug 2.3.1 has multiple heap-based buffer overflows in CmtkLoader::load() in mtk.cpp. (CVE-2019-14734)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 32 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-24ef21134b advisory.

  - An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuopl     class in emuopl.cpp because of a destructor's two OPLDestroy calls, each of which frees TL_TABLE,     SIN_TABLE, AMS_TABLE, and VIB_TABLE. (CVE-2018-17825)

  - AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::__bmf_convert_stream() in bmf.cpp.
    (CVE-2019-14690)

  - AdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader::load() in dtm.cpp. (CVE-2019-14691)

  - AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load() in mkj.cpp. (CVE-2019-14692)

  - AdPlug 2.3.1 has multiple heap-based buffer overflows in Ca2mLoader::load() in a2m.cpp. (CVE-2019-14732)

  - AdPlug 2.3.1 has multiple heap-based buffer overflows in CradLoader::load() in rad.cpp. (CVE-2019-14733)

  - AdPlug 2.3.1 has multiple heap-based buffer overflows in CmtkLoader::load() in mtk.cpp. (CVE-2019-14734)

  - AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h. (CVE-2019-15151)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-64168929e4 advisory.

  - An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuopl     class in emuopl.cpp because of a destructor's two OPLDestroy calls, each of which frees TL_TABLE,     SIN_TABLE, AMS_TABLE, and VIB_TABLE. (CVE-2018-17825)

  - AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::__bmf_convert_stream() in bmf.cpp.
    (CVE-2019-14690)

  - AdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader::load() in dtm.cpp. (CVE-2019-14691)

  - AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load() in mkj.cpp. (CVE-2019-14692)

  - AdPlug 2.3.1 has multiple heap-based buffer overflows in Ca2mLoader::load() in a2m.cpp. (CVE-2019-14732)

  - AdPlug 2.3.1 has multiple heap-based buffer overflows in CradLoader::load() in rad.cpp. (CVE-2019-14733)

  - AdPlug 2.3.1 has multiple heap-based buffer overflows in CmtkLoader::load() in mtk.cpp. (CVE-2019-14734)

  - AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h. (CVE-2019-15151)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Malvineous on Github reports :

This release fixes the following security issues :

- buffer overflow in .bmf

- buffer overflow in .dtm

- buffer overflow in .mkj

- buffer overflow in .a2m

- buffer overflow in .rad

- buffer overflow in .mtk

- double free and OOB reads in .u6m

ID	Name	Product	Family	Severity
257649	Linux Distros Unpatched Vulnerability : CVE-2019-14734	Nessus	Misc.	high
144965	Fedora 32 : adplug / audacious-plugins / ocp (2021-24ef21134b)	Nessus	Fedora Local Security Checks	critical
144964	Fedora 33 : adplug / audacious-plugins / ocp (2021-64168929e4)	Nessus	Fedora Local Security Checks	critical
137344	FreeBSD : libadplug -- Various vulnerabilities (329ecd60-aaf7-11ea-8659-10bf48e1088e)	Nessus	FreeBSD Local Security Checks	critical

Detections

Analytics

CVE-2019-14734

high

Tenable Plugins

high

critical

critical

critical