Lucene search

K
mageiaGentoo FoundationMGASA-2014-0212
HistoryMay 10, 2014 - 11:38 p.m.

Updated ldns package fixes CVE-2014-3209

2014-05-1023:38:37
Gentoo Foundation
advisories.mageia.org
5

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.3%

Updated ldns packages fix security vulnerability: ldns-keygen creates a private key with the default permissions according to the users umask, which in most cases will cause the private key to be world-readable (CVE-2014-3209).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchldns< 1.6.16-2.1ldns-1.6.16-2.1.mga3
Mageia4noarchldns< 1.6.16-3.1ldns-1.6.16-3.1.mga4

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.3%