The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execute arbitrary code if there are other vulnerabilities in the library.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Alsa-lib | Alsa-project | 1.0.6 (including) | 1.0.6 (including) |
| Enterprise_linux | Redhat | 4.0 (including) | 4.0 (including) |
| Red Hat Enterprise Linux 4 | RedHat | alsa-lib-0:1.0.6-5.RHEL4 | * |
| Alsa-lib | Ubuntu | dapper | * |
| Alsa-lib | Ubuntu | devel | * |
| Alsa-lib | Ubuntu | edgy | * |
| Alsa-lib | Ubuntu | feisty | * |