Lucene search
Gentoo FoundationMGASA-2015-0058HistoryFeb 11, 2015 - 11:47 p.m.
Updated xdg-utils packages fix CVE-2014-9622
2015-02-1123:47:51
Gentoo Foundation
advisories.mageia.org
3
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.01 Low
EPSS
Percentile
83.7%
Updated xdg-utils package fixes security vulnerability: John Houwer discovered a way to cause xdg-open, a tool that automatically opens URLs in a user’s preferred application, to execute arbitrary commands remotely (CVE-2014-9622). The xdg-utils has been updated to a much more recent snapshot, and has been patched to fix this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 4 | noarch | xdg-utils | < 1.1.0-0.0.rc3.3.1 | xdg-utils-1.1.0-0.0.rc3.3.1.mga4 |
Related
securityvulns
securityvulns
[SECURITY] [DSA 3131-1] xdg-utils security update
2015-01-19 00:00:00
xdg-open code execution
2015-03-08 00:00:00
osv
osv
xdg-utils - security update
2015-01-18 00:00:00
xdg-utils - security update
2015-05-01 00:00:00
nessus
nessus
Debian DSA-3131-1 : xdg-utils - security update
2015-01-20 00:00:00
openSUSE Security Update : xdg-utils (openSUSE-SU-2015:0191-1)
2015-02-03 00:00:00
GLSA-201701-09 : Xdg-Utils: Command injection
2017-01-03 00:00:00
prion
prion
Design/Logic Flaw
2015-01-21 18:59:00
cve
cve
CVE-2014-9622
2015-01-21 18:59:00
ubuntucve
ubuntucve
CVE-2014-9622
2015-01-21 00:00:00
debiancve
debiancve
CVE-2014-9622
2015-01-21 18:59:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2015:0271-1)
2021-04-19 00:00:00
Debian Security Advisory DSA 3131-1 (xdg-utils - security update)
2015-01-18 00:00:00
Debian: Security Advisory (DSA-3131-1)
2015-01-17 00:00:00
gentoo
gentoo
Xdg-Utils: Command injection
2017-01-01 00:00:00
debian
debian
[SECURITY] [DSA 3131-1] xdg-utils security update
2015-01-19 04:22:31
[SECURITY] [DSA 3131-1] xdg-utils security update
2015-01-19 04:22:31
[SECURITY] [DLA 217-1] xdg-utils security update
2015-05-01 09:32:20
rosalinux
rosalinux
Advisory ROSA-SA-2021-2001
2021-07-02 18:21:18
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.01 Low
EPSS
Percentile
83.7%
Related for MGASA-2015-0058