Vulnerabilities > CVE-2021-38383 - Use After Free vulnerability in Owntone Project Owntone

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

NVD

Published: 2021-08-10

Updated: 2021-08-17

Summary

OwnTone (aka owntone-server) through 28.1 has a use-after-free in net_bind() in misc.c.

Part	Description	Count
Application	Owntone_Project Owntone Project Owntone - Owntone Project Owntone 0.10 Owntone Project Owntone 0.11 Owntone Project Owntone 0.12 Owntone Project Owntone 0.19 Owntone Project Owntone 20.0 Owntone Project Owntone 21.0 Owntone Project Owntone 22.0 Owntone Project Owntone 22.1 Owntone Project Owntone 22.2 Owntone Project Owntone 22.3 Owntone Project Owntone 23.0 Owntone Project Owntone 23.1 Owntone Project Owntone 23.2 Owntone Project Owntone 23.3 Owntone Project Owntone 23.4 Owntone Project Owntone 24.0 Owntone Project Owntone 24.1 Owntone Project Owntone 24.2 Owntone Project Owntone 25.0 Owntone Project Owntone 26.0 Owntone Project Owntone 26.1 Owntone Project Owntone 26.2 Owntone Project Owntone 26.3 Owntone Project Owntone 26.4 Owntone Project Owntone 26.5 Owntone Project Owntone 27.0 Owntone Project Owntone 27.1 Owntone Project Owntone 27.2 Owntone Project Owntone 27.3 Owntone Project Owntone 27.4 Owntone Project Owntone 28.0 Owntone Project Owntone 28.1	33