Lucene search

K
mageiaGentoo FoundationMGASA-2015-0018
HistoryJan 09, 2015 - 7:44 p.m.

Updated gcab packages fix CVE-2015-0552

2015-01-0919:44:12
Gentoo Foundation
advisories.mageia.org
18

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

EPSS

0.008

Percentile

81.1%

Updated gcab packages fix security vulnerability: Jakub Wilk reported a directory traversal vulnerability due to gcab not filtering leading slashes from paths in CAB files (CVE-2015-0552).

OSVersionArchitecturePackageVersionFilename
Mageia4noarchgcab< 0.4-2.1gcab-0.4-2.1.mga4

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

EPSS

0.008

Percentile

81.1%