Lucene search

K
mageiaGentoo FoundationMGASA-2015-0161
HistoryApr 18, 2015 - 11:21 a.m.

Updated potrace packages fix CVE-2013-7437

2015-04-1811:21:36
Gentoo Foundation
advisories.mageia.org
11

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.003

Percentile

69.2%

Updated potrace packages fix security vulnerability: Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service (crash) via large dimensions in a BMP image, which triggers a buffer overflow (CVE-2013-7437).

OSVersionArchitecturePackageVersionFilename
Mageia4noarchpotrace< 1.11-3.1potrace-1.11-3.1.mga4

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.003

Percentile

69.2%