Lucene search

K
mageiaGentoo FoundationMGASA-2013-0257
HistoryAug 22, 2013 - 10:16 p.m.

Updated znc package fixes CVE-2013-2130

2013-08-2222:16:27
Gentoo Foundation
advisories.mageia.org
8

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.013 Low

EPSS

Percentile

85.6%

Updated znc packages fix security vulnerability: Multiple vulnerabilities were reported in ZNC version 1.0 which can be exploited by malicious authenticated users to cause a denial of service. These flaws are due to errors when handling the “editnetwork”, “editchan”, “addchan”, and “delchan” page requests; they can be exploited to cause a NULL pointer dereference (CVE-2013-2130).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchznc< 1.0-2.1znc-1.0-2.1.mga3

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.013 Low

EPSS

Percentile

85.6%