Lucene search

K
mageiaGentoo FoundationMGASA-2015-0307
HistoryAug 10, 2015 - 5:31 p.m.

Updated libunwind package fixes security vulnerability

2015-08-1017:31:41
Gentoo Foundation
advisories.mageia.org
17

CVSS2

3.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:P/A:N

EPSS

0

Percentile

5.1%

An invalid DW_OP_bregXX opcodes can access dwarf_to_unw_regnum_map one item past the end (CVE-2015-3239).

OSVersionArchitecturePackageVersionFilename
Mageia4noarchlibunwind< 1.1-2.1libunwind-1.1-2.1.mga4
Mageia5noarchlibunwind< 1.1-4.1libunwind-1.1-4.1.mga5

CVSS2

3.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:P/A:N

EPSS

0

Percentile

5.1%