CVE-2007-1546

Array index error in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to...

5.0 MediumFix available

Array index error in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of service (crash) via (1) large num_action values in the ProcAuSetElements function in server/dia/audispatch.c or (2) a large inputNum parameter to the compileInputs function in server/dia/auutil.c.

Exploit likelihood

2.51%Down 1.3 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2007-1546
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2007-1546
Updated: 2026-11-02

EUVDEUVD-2007-1540 No score

Record: EUVD-2007-1540
Updated: 2026-11-03

GitHub AdvisoriesGHSA-gf4x-4fm3-p65q No score

Array index error in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to...

Record: GHSA-gf4x-4fm3-p65q
Updated: 2026-11-02

OSV No score

Record: CVE-2007-1546
Updated: 2026-11-02

OSVDEBIAN-CVE-2007-1546 No score

Record: DEBIAN-CVE-2007-1546
Updated: 2026-11-02

Affected products

radscan network audio system

Affected packages

Affected packages
Package	Affected	Fixed
`nas` Debian:12	before 1.8-4	1.8-4
`nas` Debian:13	before 1.8-4	1.8-4
`nas` Debian:14	before 1.8-4	1.8-4
`nas` Debian:3.1 From an advisory covering 5 CVEs	before 1.7-2sarge1, plus listed versions 1.7-2	1.7-2sarge1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	aliases
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-1546 is a medium vulnerability (CVSS 5.0) in Radscan Network Audio System, published March 20, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.51%, the 84th percentile. Fixed in nas 1.8-4.

References

Show 14 moreShow less