Lucene search

Gentoo FoundationMGASA-2024-0292

HistorySep 10, 2024 - 7:40 p.m.

Updated apr packages fix security vulnerability

2024-09-1019:40:31

Gentoo Foundation

advisories.mageia.org

apache portable runtime

read access

security vulnerability

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.5

Confidence

Low

JSON

Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. (CVE-203-49582)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchapr< 1.7.5-1apr-1.7.5-1.mga9

OS	Version	Architecture	Package	Version	Filename
Mageia	9	noarch	apr	< 1.7.5-1	apr-1.7.5-1.mga9

References

bugs.mageia.org/show_bug.cgi?id=33514

openwall.com/lists/oss-security/2024/08/26/1

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.5

Confidence

Low

JSON

Related for MGASA-2024-0292