A remote user can create a specially crafted M3U file, media playlist file that when loaded by the target user, will trigger a memory leak, whereby Amarok 2.8.0 continue to waste resources over time, eventually allows attackers to cause a denial of service.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/159898/Amarok-2.8.0-Denial-Of-Service.html | Exploit Third Party Advisory VDB Entry |
| https://r00texpl0it.wordpress.com/2020/05/20/kde-amarok-2-8-0-allows-remote-attackers-to-cause-a-denial-of-service/ | Exploit Third Party Advisory |
| http://packetstormsecurity.com/files/159898/Amarok-2.8.0-Denial-Of-Service.html | Exploit Third Party Advisory VDB Entry |
| https://r00texpl0it.wordpress.com/2020/05/20/kde-amarok-2-8-0-allows-remote-attackers-to-cause-a-denial-of-service/ | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 05:00
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://packetstormsecurity.com/files/159898/Amarok-2.8.0-Denial-Of-Service.html - Exploit, Third Party Advisory, VDB Entry | |
| References | () https://r00texpl0it.wordpress.com/2020/05/20/kde-amarok-2-8-0-allows-remote-attackers-to-cause-a-denial-of-service/ - Exploit, Third Party Advisory |
28 Apr 2022, 19:30
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) http://packetstormsecurity.com/files/159898/Amarok-2.8.0-Denial-Of-Service.html - Exploit, Third Party Advisory, VDB Entry | |
| CWE | CWE-401 |
Information
Published : 2020-05-20 13:15
Updated : 2024-11-21 05:00
NVD link : CVE-2020-13152
Mitre link : CVE-2020-13152
CVE.ORG link : CVE-2020-13152
JSON object : View
Products Affected
kde
- amarok
CWE
CWE-401
Missing Release of Memory after Effective Lifetime