Lucene search

K
mageiaGentoo FoundationMGASA-2024-0166
HistoryMay 09, 2024 - 5:40 a.m.

Updated exfatprogs packages fix security vulnerability

2024-05-0905:40:29
Gentoo Foundation
advisories.mageia.org
13
exfatprogs
security vulnerability
memory access
package update
cve-2023-45897
unix

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

7.3

Confidence

Low

EPSS

0

Percentile

15.5%

exfatprogs before 1.2.2 allows out-of-bounds memory access, such as in read_file_dentry_set. (CVE-2023-45897)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchexfatprogs< 1.2.0-1.1exfatprogs-1.2.0-1.1.mga9

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

7.3

Confidence

Low

EPSS

0

Percentile

15.5%