Lucene search

K
mageiaGentoo FoundationMGASA-2014-0514
HistoryDec 05, 2014 - 7:59 p.m.

Updated jasper packages fix CVE-2014-9029

2014-12-0519:59:28
Gentoo Foundation
advisories.mageia.org
10

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.457 Medium

EPSS

Percentile

97.4%

Updated jasper packages fix security vulnerability: Josh Duart of the Google Security Team discovered heap-based buffer overflow flaws in JasPer, which could lead to denial of service (application crash) or the execution of arbitrary code (CVE-2014-9029).

OSVersionArchitecturePackageVersionFilename
Mageia4noarchjasper< 1.900.1-15.1jasper-1.900.1-15.1.mga4

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.457 Medium

EPSS

Percentile

97.4%