Lucene search

K
mageiaGentoo FoundationMGASA-2024-0250
HistoryJul 03, 2024 - 7:36 p.m.

Updated openssh packages fix security vulnerability

2024-07-0319:36:28
Gentoo Foundation
advisories.mageia.org
23
openssh
rce vulnerability
glibc-based
linux

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.7%

regreSSHion: RCE in OpenSSH’s server, on glibc-based Linux systems. (CVE-2024-6387)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchopenssh< 9.3p1-2.2openssh-9.3p1-2.2.mga9

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.7%