Lucene search

K
mageiaGentoo FoundationMGASA-2024-0290
HistorySep 10, 2024 - 7:40 p.m.

Updated webmin package fixes security vulnerability

2024-09-1019:40:31
Gentoo Foundation
advisories.mageia.org
webmin
security
vulnerability
cve-2024-2169
udp
application protocol
network loops
unauthenticated
attacker
maliciously-crafted packets
denial of service
dos
abuse of resources
unix

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7

Confidence

High

CVE-2024-2169: Implementations of UDP application protocol are vulnerable to network loops. An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation that can lead to Denial of Service (DOS) and/or abuse of resources.

OSVersionArchitecturePackageVersionFilename
Mageia9noarchwebmin< 2.202-1webmin-2.202-1.mga9

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7

Confidence

High