Lucene search

K
mageiaGentoo FoundationMGASA-2015-0051
HistoryFeb 06, 2015 - 1:26 a.m.

Updated vorbis-tools package fixes security vulnerability

2015-02-0601:26:07
Gentoo Foundation
advisories.mageia.org
7

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.033 Low

EPSS

Percentile

91.3%

oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted raw file (CVE-2014-9640).

OSVersionArchitecturePackageVersionFilename
Mageia4noarchvorbis-tools< 1.4.0-6.1vorbis-tools-1.4.0-6.1.mga4

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.033 Low

EPSS

Percentile

91.3%