Lucene search

K
debianDebianDEBIAN:DLA-30-1:17ED3
HistoryAug 05, 2014 - 10:56 a.m.

[DLA 30-1] acpi-support security update

2014-08-0510:56:17
lists.debian.org
12

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0

Percentile

5.1%

Package : acpi-support
Version : 0.137-5+deb6u1
CVE ID : CVE-2014-1419

CESG discovered a race condition in acpi-support which may allow
an unprivileged user to execute arbitrary code as a different user,
including root.
Attachment:
signature.asc
Description: This is a digitally signed message part.

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0

Percentile

5.1%