CVE-2016-9957

NameCVE-2016-9957
DescriptionStack-based buffer overflow in game-music-emu before 0.6.1.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDLA-750-1, DSA-3735-1
Debian Bugs848071

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
game-music-emu (PTS)buster0.6.2-1fixed
bullseye0.6.3-2fixed
bookworm0.6.3-6fixed
sid, trixie0.6.3-7fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
game-music-emusourcewheezy0.5.5-2+deb7u1DLA-750-1
game-music-emusourcejessie0.5.5-2+deb8u1DSA-3735-1
game-music-emusource(unstable)0.6.0-4848071

Notes

http://scarybeastsecurity.blogspot.de/2016/12/redux-compromising-linux-using-snes.html
https://www.openwall.com/lists/oss-security/2016/12/15/1

Search for package or bug name: Reporting problems