Lucene search

K
mageiaGentoo FoundationMGASA-2014-0543
HistoryDec 21, 2014 - 11:47 p.m.

Updated znc package fixes CVE-2014-9403

2014-12-2123:47:32
Gentoo Foundation
advisories.mageia.org
6

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.007 Low

EPSS

Percentile

80.2%

Updated znc packages fix security vulnerability: Adding an already existing channel to a user/network via web admin in ZNC causes a crash if the channel name isn’t prefixed with ‘#’ (CVE-2014-9403).

OSVersionArchitecturePackageVersionFilename
Mageia4noarchznc< 1.0-4.1znc-1.0-4.1.mga4

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.007 Low

EPSS

Percentile

80.2%