Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
oraclelinuxOracleLinuxELSA-2020-5012
HistoryNov 12, 2020 - 12:00 a.m.

librepo security update

2020-11-1200:00:00
linux.oracle.com
37

8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

55.2%

JSON

[1.8.1-8]

  • Validate paths read from repomd.xml (RhBug: 1866500)
OSVersionArchitecturePackageVersionFilename
oracle linux7srclibrepo< 1.8.1-8.el7_9librepo-1.8.1-8.el7_9.src.rpm
oracle linux7aarch64librepo< 1.8.1-8.el7_9librepo-1.8.1-8.el7_9.aarch64.rpm
oracle linux7aarch64librepo-devel< 1.8.1-8.el7_9librepo-devel-1.8.1-8.el7_9.aarch64.rpm
oracle linux7aarch64python-librepo< 1.8.1-8.el7_9python-librepo-1.8.1-8.el7_9.aarch64.rpm
oracle linux7srclibrepo< 1.8.1-8.el7_9librepo-1.8.1-8.el7_9.src.rpm
oracle linux7i686librepo< 1.8.1-8.el7_9librepo-1.8.1-8.el7_9.i686.rpm
oracle linux7x86_64librepo< 1.8.1-8.el7_9librepo-1.8.1-8.el7_9.x86_64.rpm
oracle linux7i686librepo-devel< 1.8.1-8.el7_9librepo-devel-1.8.1-8.el7_9.i686.rpm
oracle linux7x86_64librepo-devel< 1.8.1-8.el7_9librepo-devel-1.8.1-8.el7_9.x86_64.rpm
oracle linux7x86_64python-librepo< 1.8.1-8.el7_9python-librepo-1.8.1-8.el7_9.x86_64.rpm

Related

oraclelinux 1
fedora 13
nessus 25
redhat 6
suse 4
amazon 1
openvas 23
cbl_mariner 1
prion 1
cve 1
osv 1
redhatcve 1
nvd 1
mageia 1
rosalinux 1
cvelist 1
veracode 1
centos 1
photon 2
ibm 1
oraclelinux
oraclelinux
librepo security update
2020-09-09 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: dnf-plugins-core-4.0.18-1.fc32
2020-10-18 15:50:34
[SECURITY] Fedora 33 Update: librepo-1.12.1-1.fc33
2020-10-27 01:21:31
[SECURITY] Fedora 32 Update: createrepo_c-0.16.1-2.fc32
2020-10-18 15:50:32
nessus
nessus
Fedora 32 : 1:livecd-tools / createrepo_c / dnf / dnf-plugins-core / etc (2020-5d9f0ce2b3)
2020-10-19 00:00:00
EulerOS 2.0 SP9 : librepo (EulerOS-SA-2020-2431)
2020-11-03 00:00:00
Fedora 33 : 1:livecd-tools / createrepo_c / dnf-plugins-core / etc (2020-b40fc174b5)
2020-10-27 00:00:00
redhat
redhat
(RHSA-2020:3658) Important: librepo security update
2020-09-08 08:37:04
(RHSA-2020:5012) Moderate: librepo security update
2020-11-10 09:39:39
(RHSA-2020:3749) Important: librepo security update
2020-09-15 09:41:21
suse
suse
Security update for librepo (important)
2021-02-15 00:00:00
Security update for librepo (important)
2020-09-18 00:00:00
Security update for librepo (important)
2020-08-30 00:00:00
amazon
amazon
Important: librepo
2020-12-08 20:55:00
openvas
openvas
Huawei EulerOS: Security Advisory for librepo (EulerOS-SA-2020-2431)
2020-11-04 00:00:00
openSUSE: Security Advisory for librepo (openSUSE-SU-2021:0277-1)
2021-04-16 00:00:00
Fedora: Security Advisory for librepo (FEDORA-2020-b40fc174b5)
2020-10-27 00:00:00
cbl_mariner
cbl_mariner
CVE-2020-14352 affecting package librepo 1.11.0-4
2020-11-30 19:30:42
prion
prion
Design/Logic Flaw
2020-08-30 15:15:00
cve
cve
CVE-2020-14352
2020-08-30 15:15:12
osv
osv
CVE-2020-14352
2020-08-30 15:15:12
redhatcve
redhatcve
CVE-2020-14352
2020-08-13 11:43:31
nvd
nvd
CVE-2020-14352
2020-08-30 15:15:12
mageia
mageia
Updated librepo packages fix a security vulnerability
2020-11-21 15:21:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1886
2021-07-02 17:16:21
cvelist
cvelist
CVE-2020-14352
2020-08-30 13:55:27
veracode
veracode
Directory Traversal
2020-09-09 01:47:25
centos
centos
librepo, python security update
2020-11-18 17:38:35
photon
photon
Important Photon OS Security Update - PHSA-2020-0164
2020-11-23 00:00:00
Important Photon OS Security Update - PHSA-2020-3.0-0164
2020-11-23 00:00:00
ibm
ibm
Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities
2021-12-03 18:52:37

8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

55.2%

JSON
Related for ELSA-2020-5012
oraclelinux1fedora13nessus25redhat6suse4amazon1openvas23cbl_mariner1prion1cve1osv1redhatcve1nvd1mageia1rosalinux1cvelist1veracode1centos1photon2ibm1