Lucene search

K
mageiaGentoo FoundationMGASA-2015-0051
HistoryFeb 06, 2015 - 1:26 a.m.

Updated vorbis-tools package fixes security vulnerability

2015-02-0601:26:07
Gentoo Foundation
advisories.mageia.org
17

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.029

Percentile

91.0%

oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted raw file (CVE-2014-9640).

OSVersionArchitecturePackageVersionFilename
Mageia4noarchvorbis-tools< 1.4.0-6.1vorbis-tools-1.4.0-6.1.mga4

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.029

Percentile

91.0%