Lucene search

K
mageiaGentoo FoundationMGASA-2015-0353
HistorySep 08, 2015 - 8:55 p.m.

Updated vorbis-tools packages fix CVE-2015-6749

2015-09-0820:55:59
Gentoo Foundation
advisories.mageia.org
16

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.024 Low

EPSS

Percentile

90.0%

Updated vorbis-tools package fixes security vulnerability: A buffer overread is possible in vorbis-tools in oggenc/audio.c when opening a specially crafted AIFF file (CVE-2015-6749).

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.024 Low

EPSS

Percentile

90.0%