Lucene search

K
mageiaGentoo FoundationMGASA-2015-0364
HistorySep 14, 2015 - 12:58 a.m.

Updated libvdpau packages fix security vulnerabilities

2015-09-1400:58:30
Gentoo Foundation
advisories.mageia.org
5

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

Updated libvdpau packages fix security vulnerabilities: libvdpau versions 1.1 and earlier, when used in setuid or setgid applications, contain vulnerabilities related to environment variable handling that could allow an attacker to execute arbitrary code or overwrite arbitrary files (CVE-2015-5198, CVE-2015-5199, and CVE-2015-5200).

OSVersionArchitecturePackageVersionFilename
Mageia4noarchlibvdpau< 1.1.1-1libvdpau-1.1.1-1.mga4
Mageia5noarchlibvdpau< 1.1.1-1libvdpau-1.1.1-1.mga5

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%