USN-8767-1: Snapcast vulnerability
Ubuntu patches Snapcast mishandling of crafted JSON-RPC requests enabling remote code execution and data exposure.
Ubuntu security notice USN-8767-1 addresses a vulnerability in Snapcast, a multiroom audio streaming server. The software incorrectly handled crafted JSON-RPC requests, which could allow a remote attacker to execute arbitrary code or obtain sensitive information. Users are advised to update the snapcast package.
- Crafted JSON-RPC requests could trigger arbitrary code execution
- Remote attackers could also obtain sensitive information
From the original article
It was discovered that Snapcast incorrectly handled crafted JSON-RPC requests. A remote attacker could possibly use this issue to execute arbitrary code or obtain sensitive information.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.