Lucene search
Gentoo FoundationMGASA-2015-0052HistoryFeb 06, 2015 - 1:26 a.m.
Updated cabextract packages fix CVE-2014-9556
2015-02-0601:26:07
Gentoo Foundation
advisories.mageia.org
16
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.049 Low
EPSS
Percentile
92.8%
Updated cabextract packages fix security vulnerability: Libmspack, a library to provide compression and decompression of some file formats used by Microsoft, is embedded in cabextract. A specially crafted cab file can cause cabextract to hang forever. If cabextract is exposed to any remotely-controlled user input, this issue can cause a denial-of-service (CVE-2014-9556).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 4 | noarch | cabextract | < 1.5-1 | cabextract-1.5-1.mga4 |
Related
nessus
nessus
Mandriva Linux Security Advisory : cabextract (MDVSA-2015:041)
2015-02-11 00:00:00
openSUSE Security Update : libmspack (openSUSE-SU-2015:0187-1)
2015-02-03 00:00:00
Fedora 21 : libmspack-0.5-0.1.alpha.fc21 (2015-3249)
2015-03-17 00:00:00
openvas
openvas
Fedora Update for libmspack FEDORA-2015-3118
2015-07-07 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:0508-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:0366-1)
2021-04-19 00:00:00
cvelist
cvelist
CVE-2014-9556
2015-02-03 16:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: libmspack-0.5-0.1.alpha.fc21
2015-03-13 17:02:19
[SECURITY] Fedora 20 Update: libmspack-0.5-0.1.alpha.fc20
2015-03-13 17:00:43
[SECURITY] Fedora 22 Update: libmspack-0.5-0.1.alpha.fc22
2015-03-13 17:14:41
ubuntucve
ubuntucve
CVE-2014-9556
2015-02-03 00:00:00
cve
cve
CVE-2014-9556
2015-02-03 16:59:05
securityvulns
securityvulns
[ MDVSA-2015:041 ] cabextract
2015-02-16 00:00:00
libmspack / cabextract DoS
2015-02-16 00:00:00
[ MDVSA-2015:064 ] cabextract
2015-04-20 00:00:00
nvd
nvd
CVE-2014-9556
2015-02-03 16:59:05
prion
prion
Integer overflow
2015-02-03 16:59:00
debiancve
debiancve
CVE-2014-9556
2015-02-03 16:59:05
freebsd
freebsd
libmspack -- frame_end overflow which could cause infinite loop
2014-12-11 00:00:00
debian
debian
[SECURITY] [DLA 233-1] clamav security and upstream version update
2015-05-29 03:57:55
osv
osv
clamav - security update
2015-05-28 00:00:00
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.049 Low
EPSS
Percentile
92.8%
Related for MGASA-2015-0052