High · published November 26, 2025
⚡ A seemingly simple unlink operation can turn into a never-ending loop! When the file deletion fails in DB Electronica's Mozart FM Transmitter, it causes an Infinite Loop Denial of Service, leading to a system crash. 🔥 Think of it like trying to push a stubborn boulder off a cliff, only to have it magically roll back every time you give it a shove. Instead of successfully getting rid of that boulder, you just keep exhausting your energy pushing against an immovable object! If an attacker specifies an immutable file or a file without proper permissions, the system will spiral into an infinite loop, causing a Denial of Service. This means legitimate users could face serious downtime and interruption of service, which could be absolutely devastating for operations relying on the transmitter!
Think of it like trying to push a stubborn boulder off a cliff, only to have it magically roll back every time you give it a shove. Instead of successfully getting rid of that boulder, you just keep exhausting your energy pushing against an immovable object! This vulnerability arises from a flaw in the status_contents.php script where the unlink() function is called within a while loop. If unlink() fails to delete the specified file, the loop continues indefinitely, tying up system resources and leading to a service outage.
If an attacker specifies an immutable file or a file without proper permissions, the system will spiral into an infinite loop, causing a Denial of Service. This means legitimate users could face serious downtime and interruption of service, which could be absolutely devastating for operations relying on the transmitter! To resolve this issue, upgrade to the latest firmware version provided by DB Electronica. Additionally, review the file permissions and ensure that only files meant to be deleted are specified in unlink() operations. This will greatly reduce the risk of triggering this infinite loop! You’ve got this! With the right steps, you can keep your systems running smoothly and secure. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| dbbroadcast/mozart_next_100_firmware | all versions | — |
| dbbroadcast/mozart_next_1000_firmware | all versions | — |
| dbbroadcast/mozart_next_2000_firmware | all versions | — |
| dbbroadcast/mozart_next_30_firmware | all versions | — |
| dbbroadcast/mozart_next_300_firmware | all versions | — |
| dbbroadcast/mozart_next_3000_firmware | all versions | — |
| dbbroadcast/mozart_next_3500_firmware | all versions | — |
| dbbroadcast/mozart_next_50_firmware | all versions | — |
| dbbroadcast/mozart_next_500_firmware | all versions | — |
| dbbroadcast/mozart_next_6000_firmware | all versions | — |
| dbbroadcast/mozart_next_7000_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_30_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_50_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_100_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_300_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_500_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_1000_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_2000_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_3000_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_3500_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_6000_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_7000_firmware | all versions | — |