Lucene search

K
mageiaGentoo FoundationMGASA-2014-0190
HistoryApr 23, 2014 - 8:16 p.m.

Updated libmms packages fix CVE-2014-2892

2014-04-2320:16:27
Gentoo Foundation
advisories.mageia.org
7

0.209 Low

EPSS

Percentile

96.4%

Updated libmms packages fix security vulnerability: The libmms library before 0.6.4 is vulnerable to a buffer overflow in get_answer() in src/mmsh.c. It may be triggered via an overly long line of a MMSH (MMS over HTTP) server response, effectively overflowing the buffer which has a static size (CVE-2014-2892).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchlibmms< 0.6.2-3.1libmms-0.6.2-3.1.mga3
Mageia4noarchlibmms< 0.6.2-4.1libmms-0.6.2-4.1.mga4