CVE-2007-1547 The ReadRequestFromClient function in server/os/io.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of service (crash) via multiple simultaneous connection...
HighCVSS 7.8
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The ReadRequestFromClient function in server/os/io.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of service (crash) via multiple simultaneous connections, which triggers a NULL pointer dereference.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| radscan network audio system | = 1.8a | No fix listed |
| debian/nas(Debian:12) | < 1.8-4 | 1.8-4 |
| debian/nas(Debian:13) | < 1.8-4 | 1.8-4 |
| debian/nas(Debian:14) | < 1.8-4 | 1.8-4 |
References
- aluigi.altervista.org vendor-advisory
- 24527 third-party-advisory vendor-advisory
- 24601 third-party-advisory
- 24628 third-party-advisory
- 24638 third-party-advisory
- 24980 third-party-advisory
- GLSA-200704-20 vendor-advisory
- DSA-1273 vendor-advisory
- MDKSA-2007:065 vendor-advisory
- www.radscan.com
- 20070403 FLEA-2007-0007-1: nas mailing-list
- 23017 vdb-entry
- 1017822 vdb-entry
- USN-446-1 vendor-advisory
- ADV-2007-0997 vdb-entry
- nas-readrequestfromclient-dos(33059) vdb-entry
- Debian Security Tracker CVE-2007-1547 vendor-advisory
- bugs.debian.org issue-tracking