4.4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
7 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
6.9 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Package : arts
Version : 1.5.9-3+deb6u1
CVE ID : CVE-2015-7543
It has been reported that arts uses the insecure mktemp() function
to create the temporary directory it uses to host user-specific sockets.
It is thus possible for another user to hijack this temporary directory
and gain IPC access it should not have.
In Debian 6 βSqueezeβ, this issue has been addressed in arts
1.5.9-3+deb6u1 with the use of the safer mkdtemp() function.
We recommend that you upgrade your arts packages.
Other Debian releases do not have the arts package.
β
RaphaΓ«l Hertzog β Debian Developer
Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/
Attachment:
signature.asc
Description: PGP signature
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 6 | i386 | libartsc0-dev | <Β 1.5.9-3+deb6u1 | libartsc0-dev_1.5.9-3+deb6u1_i386.deb |
Debian | 6 | amd64 | libarts1c2a | <Β 1.5.9-3+deb6u1 | libarts1c2a_1.5.9-3+deb6u1_amd64.deb |
Debian | 6 | amd64 | libarts1-dev | <Β 1.5.9-3+deb6u1 | libarts1-dev_1.5.9-3+deb6u1_amd64.deb |
Debian | 6 | i386 | arts-dbg | <Β 1.5.9-3+deb6u1 | arts-dbg_1.5.9-3+deb6u1_i386.deb |
Debian | 6 | amd64 | libartsc0-dev | <Β 1.5.9-3+deb6u1 | libartsc0-dev_1.5.9-3+deb6u1_amd64.deb |
Debian | 6 | all | kdelibs | <Β 3.5.10.dfsg.1-5+deb6u1 | kdelibs_3.5.10.dfsg.1-5+deb6u1_all.deb |
Debian | 6 | i386 | libarts1-dev | <Β 1.5.9-3+deb6u1 | libarts1-dev_1.5.9-3+deb6u1_i386.deb |
Debian | 6 | i386 | libartsc0 | <Β 1.5.9-3+deb6u1 | libartsc0_1.5.9-3+deb6u1_i386.deb |
Debian | 6 | amd64 | arts-dbg | <Β 1.5.9-3+deb6u1 | arts-dbg_1.5.9-3+deb6u1_amd64.deb |
Debian | 6 | i386 | libarts1c2a | <Β 1.5.9-3+deb6u1 | libarts1c2a_1.5.9-3+deb6u1_i386.deb |
4.4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
7 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
6.9 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%