Lucene search

K
mageiaGentoo FoundationMGASA-2014-0073
HistoryFeb 16, 2014 - 5:09 p.m.

Updated cxxtols package fixes security issue

2014-02-1617:09:28
Gentoo Foundation
advisories.mageia.org
12

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.033 Low

EPSS

Percentile

91.3%

A flaw in cxxtools version 2.2 allows remote attackers to cause a denial of service (infinite recursion and crash) via an HTTP query that contains %% (double percent) characters (CVE-2013-7298). This update fixes the vulnerability.

OSVersionArchitecturePackageVersionFilename
Mageia4noarchcxxtools< 2.2-2.1cxxtools-2.2-2.1.mga4

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.033 Low

EPSS

Percentile

91.3%