Lucene search

Debian Security Bug TrackerDEBIANCVE:CVE-2015-0565

HistoryFeb 25, 2020 - 8:15 p.m.

CVE-2015-0565

2020-02-2520:15:10

Debian Security Bug Tracker

security-tracker.debian.org

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

0.144 Low

EPSS

Percentile

95.8%

JSON

NaCl in 2015 allowed the CLFLUSH instruction, making rowhammer attacks possible.

OSVersionArchitecturePackageVersionFilename
Debian12allnacl<= 20110221-12nacl_20110221-12_all.deb
Debian11allnacl<= 20110221-6.1nacl_20110221-6.1_all.deb
Debian999allnacl<= 20110221-14nacl_20110221-14_all.deb
Debian13allnacl<= 20110221-14nacl_20110221-14_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	nacl	<= 20110221-12	nacl_20110221-12_all.deb
Debian	11	all	nacl	<= 20110221-6.1	nacl_20110221-6.1_all.deb
Debian	999	all	nacl	<= 20110221-14	nacl_20110221-14_all.deb
Debian	13	all	nacl	<= 20110221-14	nacl_20110221-14_all.deb

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

0.144 Low

EPSS

Percentile

95.8%

JSON

Related for DEBIANCVE:CVE-2015-0565