[ GLSA 201406-22 ] Network Audio System: Multiple vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: Network Audio System: Multiple vulnerabilities (GLSA 201406-22)
Severity: normal
Exploitable: local, remote
Date: June 25, 2014
Bug(s): #484480
ID: 201406-22

Synopsis

Multiple vulnerabilities have been found in Network Audio System,
the worst of which allows remote attackers to execute arbitrary code.


Background

Network Audio System is a network transparent, client/server audio
transport system.


Affected Packages

Package: media-libs/nas
Vulnerable: < 1.9.4
Unaffected: >= 1.9.4
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Network Audio System.
Please review the CVE identifiers referenced below for details.


Impact

A context-dependent attacker could possibly execute arbitrary code with
the privileges of the process or cause a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All Network Audio System users should upgrade to the latest version: