[SECURITY] [DLA 1338-1] beep security update

2018-04-0306:46:17

lists.debian.org

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

26.8%

JSON

Package : beep
Version : 1.3-3+deb7u1
CVE ID : CVE-2018-0492
Debian Bug : #894667

It was discovered that there was a local privilege escalation
vulnerability in beep, an "advanced PC speaker beeper".

For Debian 7 "Wheezy", this issue has been fixed in beep version
1.3-3+deb7u1.

We recommend that you upgrade your beep packages.

Regards,

  ,&#x27;&#x27;`.
 : :&#x27;  :     Chris Lamb
 `. `&#x27;`      [email protected] / chris-lamb.co.uk
   `-

OSVersionArchitecturePackageVersionFilename
Debian8amd64beep-udeb< 1.3-3+deb8u1beep-udeb_1.3-3+deb8u1_amd64.deb
Debian9amd64beep-udeb< 1.3-4+deb9u1beep-udeb_1.3-4+deb9u1_amd64.deb
Debian9allbeep< 1.3-4+deb9u1beep_1.3-4+deb9u1_all.deb
Debian8arm64beep< 1.3-3+deb8u1beep_1.3-3+deb8u1_arm64.deb
Debian8ppc64elbeep< 1.3-3+deb8u1beep_1.3-3+deb8u1_ppc64el.deb
Debian8mipselbeep< 1.3-3+deb8u1beep_1.3-3+deb8u1_mipsel.deb
Debian7allbeep< 1.3-3+deb7u1beep_1.3-3+deb7u1_all.deb
Debian7armhfbeep< 1.3-3+deb7u1beep_1.3-3+deb7u1_armhf.deb
Debian9armhfbeep< 1.3-4+deb9u1beep_1.3-4+deb9u1_armhf.deb
Debian9s390xbeep-dbgsym< 1.3-4+deb9u1beep-dbgsym_1.3-4+deb9u1_s390x.deb

OS	Version	Architecture	Package	Version	Filename
Debian	8	amd64	beep-udeb	< 1.3-3+deb8u1	beep-udeb_1.3-3+deb8u1_amd64.deb
Debian	9	amd64	beep-udeb	< 1.3-4+deb9u1	beep-udeb_1.3-4+deb9u1_amd64.deb
Debian	9	all	beep	< 1.3-4+deb9u1	beep_1.3-4+deb9u1_all.deb
Debian	8	arm64	beep	< 1.3-3+deb8u1	beep_1.3-3+deb8u1_arm64.deb
Debian	8	ppc64el	beep	< 1.3-3+deb8u1	beep_1.3-3+deb8u1_ppc64el.deb
Debian	8	mipsel	beep	< 1.3-3+deb8u1	beep_1.3-3+deb8u1_mipsel.deb
Debian	7	all	beep	< 1.3-3+deb7u1	beep_1.3-3+deb7u1_all.deb
Debian	7	armhf	beep	< 1.3-3+deb7u1	beep_1.3-3+deb7u1_armhf.deb
Debian	9	armhf	beep	< 1.3-4+deb9u1	beep_1.3-4+deb9u1_armhf.deb
Debian	9	s390x	beep-dbgsym	< 1.3-4+deb9u1	beep-dbgsym_1.3-4+deb9u1_s390x.deb