CVE-2013-4258 Other in n/a

High 7.5 Published 9 Oct 2013 Updated 6 Aug 2024

Remote attackers can cause a crash or potentially execute arbitrary code in Network Audio System via format string vulnerabilities in the logging function.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2013-4258?

CVE-2013-4258 is a high-severity vulnerability in n/a, published on 9 Oct 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Format string vulnerability in the osLogMsg function in server/os/aulog.c in Network Audio System (NAS) 1.9.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in unspecified vectors, related to syslog.

Weakness: CWE-134

Which versions are affected by CVE-2013-4258?

It affects 1 product.

Products include Radscan Network Audio System.

How do I fix CVE-2013-4258?

Apply the vendor's patch.

Is CVE-2013-4258 being exploited?

There is no known exploitation of CVE-2013-4258 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2013-4258, GHSA-v2p7-mrrm-w56p.