Lucene search

K
mageiaGentoo FoundationMGASA-2016-0104
HistoryMar 10, 2016 - 1:57 a.m.

Updated pigz packages fix security vulnerability

2016-03-1001:57:53
Gentoo Foundation
advisories.mageia.org
6

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.012 Low

EPSS

Percentile

84.9%

Multiple directory traversal vulnerabilities in pigz 2.3.1 allow remote attackers to write to arbitrary files via a full pathname or … (dot dot) in an archive (CVE-2015-1191).

OSVersionArchitecturePackageVersionFilename
Mageia5noarchpigz< 2.3.1-3.1pigz-2.3.1-3.1.mga5

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.012 Low

EPSS

Percentile

84.9%