Lucene search

K
mageiaGentoo FoundationMGASA-2024-0291
HistorySep 10, 2024 - 7:40 p.m.

Updated openssl packages fix security vulnerability

2024-09-1019:40:31
Gentoo Foundation
advisories.mageia.org
5
openssl
security vulnerability
denial of service
x.509 name checks
unix

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

Low

Possible denial of service in X.509 name checks. (CVE-2024-6119)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchopenssl< 3.0.15-1openssl-3.0.15-1.mga9

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

Low