Ardour/ardour

Releases158

Frequency1 month 2 weeks

Last Releaseabout 2 months ago

Stars5.13K

Mirror of Ardour Source Code

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2020-22617NVD↗	= 5.12	Oct 8, 2021Friday, 8 October 2021, 20:15	9.8 CRITICAL	7.5 HIGH
Ardour v5.12 contains a use-after-free vulnerability in the component ardour/libs/pbd/xml++.cc when using xmlFreeDoc and xmlXPathFreeContext.
CVE-2010-3349NVD↗	= 2.8.11	Oct 20, 2010Wednesday, 20 October 2010, 18:00	—	6.9 MEDIUM
Ardour 2.8.11 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.