Lucene search

Gentoo FoundationMGASA-2021-0285

HistoryJun 25, 2021 - 5:43 p.m.

Updated matio packages fix a security vulnerability

2021-06-2517:43:41

Gentoo Foundation

advisories.mageia.org

matio

memory leak

vulnerability

safemuldims

cve-2019-20052

mat.c

unix

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

34.7%

JSON

A memory leak was discovered in Mat_VarCalloc in mat.c in matio 1.5.17 because SafeMulDims does not consider the rank==0 case (CVE-2019-20052).

OSVersionArchitecturePackageVersionFilename
Mageia7noarchmatio< 1.5.16-1.2matio-1.5.16-1.2.mga7

OS	Version	Architecture	Package	Version	Filename
Mageia	7	noarch	matio	< 1.5.16-1.2	matio-1.5.16-1.2.mga7

References

bugs.mageia.org/show_bug.cgi?id=27969

github.com/tbeu/matio/commit/a47b7cd3aca70e9a0bddf8146eb4ab0cbd19c2c3

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

34.7%

JSON

Related for MGASA-2021-0285