Gentoo FoundationGLSA-202209-08Smokeping: Multiple vulnerabilities
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
Percentile
31.9%
Background
Smokeping is a powerful latency measurement tool
Description
Multiple vulnerabilities have been discovered in Smokeping. Please review the CVE identifiers referenced below for details.
Impact
A local attacker which gains access to the smokeping user could gain root privileges.
Workaround
There is no known workaround at this time.
Resolution
Gentoo has discontinued support for Smokeping. We recommend that users remove it:
# emerge --ask --depclean "net-analyzer/smokeping"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | net-analyzer/smokeping | <= 2.7.3-r1 | UNKNOWN |
Related
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
Percentile
31.9%