Lucene search

K
mageiaGentoo FoundationMGASA-2014-0514
HistoryDec 05, 2014 - 7:59 p.m.

Updated jasper packages fix CVE-2014-9029

2014-12-0519:59:28
Gentoo Foundation
advisories.mageia.org
13

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.425 Medium

EPSS

Percentile

97.3%

Updated jasper packages fix security vulnerability: Josh Duart of the Google Security Team discovered heap-based buffer overflow flaws in JasPer, which could lead to denial of service (application crash) or the execution of arbitrary code (CVE-2014-9029).

OSVersionArchitecturePackageVersionFilename
Mageia4noarchjasper< 1.900.1-15.1jasper-1.900.1-15.1.mga4

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.425 Medium

EPSS

Percentile

97.3%