Lucene search

K
freebsdFreeBSDA33ADDF6-74E6-11E4-A615-F8B156B6DCC8
HistoryNov 25, 2014 - 12:00 a.m.

flac -- Multiple vulnerabilities

2014-11-2500:00:00
vuxml.freebsd.org
13

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.652 Medium

EPSS

Percentile

97.9%

Erik de Castro Lopo reports:

Google Security Team member, Michele Spagnuolo, recently
found two potential problems in the FLAC code base. They are:

CVE-2014-9028: Heap buffer write overflow.
CVE-2014-8962: Heap buffer read overflow.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchflac< 1.3.0_3UNKNOWN
FreeBSDanynoarchlinux-c6-flac< 1.2.1_3UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.652 Medium

EPSS

Percentile

97.9%