Lucene search

K
mageiaGentoo FoundationMGASA-2015-0087
HistoryFeb 26, 2015 - 11:26 a.m.

Updated apache-poi packages fix CVE-2014-9527

2015-02-2611:26:53
Gentoo Foundation
advisories.mageia.org
7

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.011 Low

EPSS

Percentile

84.3%

Updated apache-poi packages fixes security vulnerability: A denial of service flaw was found in the way the HSLFSlideShow class implementation in Apache POI handled certain PPT files. A remote attacker could submit a specially crafted PPT file that would cause Apache POI to hang indefinitely (CVE-2014-9527).

OSVersionArchitecturePackageVersionFilename
Mageia4noarchapache-poi<ย 3.10.1-1.1apache-poi-3.10.1-1.1.mga4

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.011 Low

EPSS

Percentile

84.3%