Lucene search
Gentoo FoundationMGASA-2014-0346HistoryAug 22, 2014 - 2:58 p.m.
Updated sdcc packages fix a security vulnerability
2014-08-2214:58:14
Gentoo Foundation
advisories.mageia.org
5
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.023 Low
EPSS
Percentile
89.6%
Integer overflow, leading to heap-buffer overflow by processing certain file headers via bfd binary. (CVE-2012-3509) A nonfree package is also now available, which provides components that cannot be included in the core repository. In addition, this update obsoletes sdcc2.9, which is old and probably has the same security vulnerability.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 3 | noarch | sdcc | < 3.4.0-6 | sdcc-3.4.0-6.mga3 |
| Mageia | 3 | noarch | sdcc | < 3.4.0-6 | sdcc-3.4.0-6.mga3.nonfree |
| Mageia | 4 | noarch | sdcc | < 3.4.0-6 | sdcc-3.4.0-6.mga4 |
| Mageia | 4 | noarch | sdcc | < 3.4.0-6 | sdcc-3.4.0-6.mga4.nonfree |
Related
openvas
openvas
Fedora Update for insight FEDORA-2012-18311
2012-11-26 00:00:00
Fedora Update for ghdl FEDORA-2014-1835
2014-08-06 00:00:00
Fedora Update for insight FEDORA-2012-18300
2012-11-26 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: insight-7.4.50-4.20120403cvs.fc16
2012-11-24 03:32:00
[SECURITY] Fedora 20 Update: ghdl-0.31-1.fc20
2014-02-08 05:09:35
[SECURITY] Fedora 19 Update: ghdl-0.31-1.fc19
2014-02-08 05:06:31
debian
debian
[SECURITY] [DLA 324-1] binutils security update
2015-10-02 02:03:24
nessus
nessus
Debian DLA-324-1 : binutils security update
2015-10-02 00:00:00
Fedora 19 : ghdl-0.31-1.fc19 (2014-1828)
2014-02-10 00:00:00
Fedora 19 : sdcc-3.3.0-1.fc19 (2014-8528)
2014-08-04 00:00:00
debiancve
debiancve
CVE-2012-3509
2012-09-05 23:55:00
ubuntucve
ubuntucve
CVE-2012-3509
2012-09-05 00:00:00
prion
prion
Integer overflow
2012-09-05 23:55:00
osv
osv
binutils - security update
2015-10-02 00:00:00
cve
cve
CVE-2012-3509
2012-09-05 23:55:00
ubuntu
ubuntu
GNU binutils vulnerabilities
2015-02-09 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.023 Low
EPSS
Percentile
89.6%
Related for MGASA-2014-0346