Lucene search

K
mageiaGentoo FoundationMGASA-2024-0218
HistoryJun 14, 2024 - 4:31 a.m.

Updated poppler packages fix security vulnerability

2024-06-1404:31:37
Gentoo Foundation
advisories.mageia.org
9
security vulnerability
poppler
out-of-bounds
array write
unix

CVSS3

2.9

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

7

Confidence

Low

EPSS

0

Percentile

9.0%

Out-of-bounds array write. (CVE-2024-4141)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchpoppler< 23.02.0-1.2poppler-23.02.0-1.2.mga9

CVSS3

2.9

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

7

Confidence

Low

EPSS

0

Percentile

9.0%