Vulnerability Details CVE-2025-57156
NULL pointer dereference in the dacp_reply_playqueueedit_clear function in src/httpd_dacp.c in owntone-server through commit 6d604a1 (newer commit after version 28.12) allows remote attackers to cause a Denial of Service (crash).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 46.0%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2025-57156
-
cpe:2.3:a:owntone:owntone_server:-
-
cpe:2.3:a:owntone:owntone_server:0.10
-
cpe:2.3:a:owntone:owntone_server:0.11
-
cpe:2.3:a:owntone:owntone_server:0.12
-
cpe:2.3:a:owntone:owntone_server:0.19
-
cpe:2.3:a:owntone:owntone_server:20.0
-
cpe:2.3:a:owntone:owntone_server:21.0
-
cpe:2.3:a:owntone:owntone_server:22.0
-
cpe:2.3:a:owntone:owntone_server:22.1
-
cpe:2.3:a:owntone:owntone_server:22.2
-
cpe:2.3:a:owntone:owntone_server:22.3
-
cpe:2.3:a:owntone:owntone_server:23.0
-
cpe:2.3:a:owntone:owntone_server:23.1
-
cpe:2.3:a:owntone:owntone_server:23.2
-
cpe:2.3:a:owntone:owntone_server:23.3
-
cpe:2.3:a:owntone:owntone_server:23.4
-
cpe:2.3:a:owntone:owntone_server:24.0
-
cpe:2.3:a:owntone:owntone_server:24.1
-
cpe:2.3:a:owntone:owntone_server:24.2
-
cpe:2.3:a:owntone:owntone_server:25.0
-
cpe:2.3:a:owntone:owntone_server:26.0
-
cpe:2.3:a:owntone:owntone_server:26.1
-
cpe:2.3:a:owntone:owntone_server:26.2
-
cpe:2.3:a:owntone:owntone_server:26.3
-
cpe:2.3:a:owntone:owntone_server:26.4
-
cpe:2.3:a:owntone:owntone_server:26.5
-
cpe:2.3:a:owntone:owntone_server:27.0
-
cpe:2.3:a:owntone:owntone_server:27.1
-
cpe:2.3:a:owntone:owntone_server:27.2
-
cpe:2.3:a:owntone:owntone_server:27.3
-
cpe:2.3:a:owntone:owntone_server:27.4
-
cpe:2.3:a:owntone:owntone_server:28.0
-
cpe:2.3:a:owntone:owntone_server:28.1
-
cpe:2.3:a:owntone:owntone_server:28.10
-
cpe:2.3:a:owntone:owntone_server:28.11
-
cpe:2.3:a:owntone:owntone_server:28.12
-
cpe:2.3:a:owntone:owntone_server:28.2
-
cpe:2.3:a:owntone:owntone_server:28.3
-
cpe:2.3:a:owntone:owntone_server:28.4
-
cpe:2.3:a:owntone:owntone_server:28.5
-
cpe:2.3:a:owntone:owntone_server:28.6
-
cpe:2.3:a:owntone:owntone_server:28.7
-
cpe:2.3:a:owntone:owntone_server:28.8
-
cpe:2.3:a:owntone:owntone_server:28.9