CVE-2023-36177
Critical · 9.8CVSS
9.8
EPSS
27.5%
Published
Jan 23, 2024
CISA due date
—
The record
An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive information via crafted request in JSON-RPC-API.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | snapcast | 0 | No fix |
| Debian:12 | snapcast | 0 | No fix |
| Debian:12 | snapcast | 0 | 0.26.0+dfsg1-1+deb12u1 |
| Debian:13 | snapcast | 0 | No fix |
| Debian:13 | snapcast | 0 | 0.30.0-1 |