Lucene search

K
freebsdFreeBSDB3FD12EA-917A-11ED-ACBE-B42E991FC52E
HistoryJan 30, 2015 - 12:00 a.m.

cassandra3 -- jBCrypt integer overflow

2015-01-3000:00:00
vuxml.freebsd.org
9

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

76.3%

mindrot project reports:

There is an integer overflow that
occurs with very large log_rounds values, first reported by
Marcus Rathsfeld.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchcassandra3< 3.11.12UNKNOWN

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

76.3%