Lucene search

K
mageiaGentoo FoundationMGASA-2024-0168
HistoryMay 09, 2024 - 5:40 a.m.

Updated traceroute packages fix security vulnerability

2024-05-0905:40:29
Gentoo Foundation
advisories.mageia.org
33
traceroute
security vulnerability
command line parsing

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

Low

EPSS

0

Percentile

5.1%

In Traceroute 2.0.12 through 2.1.2 (before 2.1.3), the wrapper scripts do not properly parse command lines. (CVE-2023-46316)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchtraceroute< 2.1.3-1traceroute-2.1.3-1.mga9

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

Low

EPSS

0

Percentile

5.1%