CVE-2007-1546 Array index error in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of service (crash) via (1) large num_action values in the ProcAuSetElements function in se...
MediumCVSS 5.0
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Array index error in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of service (crash) via (1) large num_action values in the ProcAuSetElements function in server/dia/audispatch.c or (2) a large inputNum parameter to the compileInputs function in server/dia/auutil.c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| radscan network audio system | = 1.8a | No fix listed |
| debian/nas(Debian:12) | < 1.8-4 | 1.8-4 |
| debian/nas(Debian:13) | < 1.8-4 | 1.8-4 |
| debian/nas(Debian:14) | < 1.8-4 | 1.8-4 |
References
- aluigi.altervista.org exploit patch vendor-advisory
- 24527 third-party-advisory
- 24601 third-party-advisory
- 24628 third-party-advisory
- 24638 third-party-advisory
- 24980 third-party-advisory
- GLSA-200704-20 vendor-advisory
- DSA-1273 vendor-advisory
- MDKSA-2007:065 vendor-advisory
- www.radscan.com
- 20070403 FLEA-2007-0007-1: nas mailing-list
- 23017 vdb-entry
- 1017822 vdb-entry
- USN-446-1 vendor-advisory
- ADV-2007-0997 vdb-entry
- nas-procausetelements-dos(33054) vdb-entry
- nas-compileinputs-dos(33055) vdb-entry
- Debian Security Tracker CVE-2007-1546 vendor-advisory
- bugs.debian.org issue-tracking