NULL pointer dereference in the daap_reply_groups function in src/httpd_daap.c in owntone-server through commit 5e6f19a (newer commit after version 28.2) allows remote attackers to cause a Denial of Service.
References
Configurations
History
13 Feb 2026, 21:04
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Owntone owntone Server
Owntone |
|
| CPE | cpe:2.3:a:owntone:owntone_server:*:*:*:*:*:*:*:* |
03 Feb 2026, 21:08
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:owntone_project:owntone:*:*:*:*:*:*:*:* | |
| References | () https://github.com/archersec/security-advisories/blob/master/owntone-server/owntone-server-advisory-2025.md - Patch, Vendor Advisory | |
| References | () https://github.com/owntone/owntone-server/commit/d857116e4143a500d6a1ea13f4baa057ba3b0028 - Patch | |
| First Time |
Owntone Project owntone
Owntone Project |
21 Jan 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-476 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
20 Jan 2026, 21:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-20 21:16
Updated : 2026-02-13 21:04
NVD link : CVE-2025-57155
Mitre link : CVE-2025-57155
CVE.ORG link : CVE-2025-57155
JSON object : View
Products Affected
owntone
- owntone_server
CWE
CWE-476
NULL Pointer Dereference