Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2017-0103
HistoryApr 04, 2017 - 9:44 a.m.

Updated mxml packages fix security vulnerability

2017-04-0409:44:05
Gentoo Foundation
advisories.mageia.org
9

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.005 Low

EPSS

Percentile

77.2%

JSON

Two stack exhaustion issues based on uncontrolled recursion were found in mxml. A maliciously crafted xml file can cause the application to crash. * Recursion using mxmlDelete at mxml-node.c:217 (reproducer is stack-exhaustion-1.xml CVE-2016-4570). * Recursion using mxml_write_node at mxml-file.c:2739 (reproducer is stack-exhaustion-2.xml CVE-2016-4571).

OSVersionArchitecturePackageVersionFilename
Mageia5noarchmxml< 2.7-6.1mxml-2.7-6.1.mga5

Related

nessus 3
openvas 3
fedora 1
osv 3
debian 1
cve 2
debiancve 2
ubuntucve 2
nvd 2
prion 2
cvelist 2
nessus
nessus
openSUSE Security Update : mxml (openSUSE-2017-380)
2017-03-28 00:00:00
Debian DLA-1641-1 : mxml security update
2019-01-28 00:00:00
Fedora 24 : mxml (2016-44821f9576)
2016-07-14 00:00:00
openvas
openvas
Fedora Update for mxml FEDORA-2016-44821f9576
2016-06-19 00:00:00
Mageia: Security Advisory (MGASA-2017-0103)
2022-01-28 00:00:00
Debian: Security Advisory (DLA-1641-1)
2019-01-24 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: mxml-2.9-1.fc24
2016-06-18 19:12:08
osv
osv
mxml - security update
2019-01-25 00:00:00
CVE-2016-4570
2017-02-03 15:59:00
CVE-2016-4571
2017-02-03 15:59:00
debian
debian
[SECURITY] [DLA 1641-1] mxml security update
2019-01-25 07:56:02
cve
cve
CVE-2016-4571
2017-02-03 15:59:00
CVE-2016-4570
2017-02-03 15:59:00
debiancve
debiancve
CVE-2016-4571
2017-02-03 15:59:00
CVE-2016-4570
2017-02-03 15:59:00
ubuntucve
ubuntucve
CVE-2016-4571
2017-02-03 00:00:00
CVE-2016-4570
2017-02-03 00:00:00
nvd
nvd
CVE-2016-4571
2017-02-03 15:59:00
CVE-2016-4570
2017-02-03 15:59:00
prion
prion
Code injection
2017-02-03 15:59:00
Code injection
2017-02-03 15:59:00
cvelist
cvelist
CVE-2016-4570
2017-02-03 15:00:00
CVE-2016-4571
2017-02-03 15:00:00

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.005 Low

EPSS

Percentile

77.2%

JSON
Related for MGASA-2017-0103
nessus3openvas3fedora1osv3debian1cve2debiancve2ubuntucve2nvd2prion2cvelist2