CVE-2012-082419.11.2019, 16:15gnusound 0.7.5 has format string issueEnginsightProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVectorNISTNIST9.8 CRITICALNETWORKLOWNONECVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HredhatCNA------CVEADP------Base ScoreCVSS 3.xEPSS ScorePercentile: 65%VendorProductVersiongnugnusound0.7.5𝑥= Vulnerable software versionsUbuntu ReleasesUbuntu ProductCodenamegnusoundsaucydneraringdnequantaldneprecisedneoneiricdnenattyignoredmaverickignoredlucidignoredhardyignoredCommon Weakness EnumerationCWE-134 - Use of Externally-Controlled Format StringThe software uses a function that accepts a format string as an argument, but the format string originates from an external source.Referenceshttp://www.openwall.com/lists/oss-security/2012/01/31/3https://access.redhat.com/security/cve/cve-2012-0824https://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-0824.htmlhttps://security-tracker.debian.org/tracker/CVE-2012-0824http://www.openwall.com/lists/oss-security/2012/01/31/3https://access.redhat.com/security/cve/cve-2012-0824https://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-0824.htmlhttps://security-tracker.debian.org/tracker/CVE-2012-0824
