Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-2892HistoryApr 22, 2014 - 2:23 p.m.
CVE-2014-2892
2014-04-2214:23:00
Debian Security Bug Tracker
security-tracker.debian.org
7
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.209 Low
EPSS
Percentile
96.4%
Heap-based buffer overflow in the get_answer function in mmsh.c in libmms before 0.6.4 allows remote attackers to execute arbitrary code via a long line in an MMS over HTTP (MMSH) server response.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libmms | < 0.6.2-4 | libmms_0.6.2-4_all.deb |
| Debian | 11 | all | libmms | < 0.6.2-4 | libmms_0.6.2-4_all.deb |
| Debian | 10 | all | libmms | < 0.6.2-4 | libmms_0.6.2-4_all.deb |
| Debian | 999 | all | libmms | < 0.6.2-4 | libmms_0.6.2-4_all.deb |
| Debian | 13 | all | libmms | < 0.6.2-4 | libmms_0.6.2-4_all.deb |
Related
nessus
nessus
Debian DSA-2916-1 : libmms - security update
2014-04-29 00:00:00
openSUSE Security Update : libmms (openSUSE-SU-2014:0590-1)
2014-06-13 00:00:00
GLSA-201612-29 : libmms: Remote execution of arbitrary code
2016-12-12 00:00:00
debian
debian
[SECURITY] [DSA 2916-1] libmms security update
2014-04-28 16:47:57
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0190)
2022-01-28 00:00:00
Debian: Security Advisory (DSA-2916-1)
2014-04-27 00:00:00
Debian Security Advisory DSA 2916-1 (libmms - security update)
2014-04-28 00:00:00
ubuntucve
ubuntucve
CVE-2014-2892
2014-04-22 00:00:00
mageia
mageia
Updated libmms packages fix CVE-2014-2892
2014-04-23 20:16:27
securityvulns
securityvulns
libmms buffer overflow
2014-05-04 00:00:00
[SECURITY] [DSA 2916-1] libmms security update
2014-05-04 00:00:00
osv
osv
libmms - security update
2014-04-28 00:00:00
gentoo
gentoo
libmms: Remote execution of arbitrary code
2016-12-11 00:00:00
cve
cve
CVE-2014-2892
2014-04-22 14:23:00
prion
prion
Heap overflow
2014-04-22 14:23:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.209 Low
EPSS
Percentile
96.4%
Related for DEBIANCVE:CVE-2014-2892