Lucene search

ROSA LABROSA-SA-2024-2425

HistoryMay 28, 2024 - 8:24 a.m.

Advisory ROSA-SA-2024-2425

2024-05-2808:24:10

ROSA LAB

abf.rosalinux.ru

advisory

rosa-chrome

package_evr_string

cve-2019-25051

bdu-id

gnu aspell

objstack

heap buffer overflow

fixed

sudo dnf update

unix

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

Low

EPSS

0.001

Percentile

30.7%

JSON

software: aspell 0.60.8
WASP: ROSA-CHROME

package_evr_string: aspell-0.60.8-3

CVE-ID: CVE-2019-25051
BDU-ID: None
CVE-Crit: N/A
CVE-DESC.: objstack in GNU Aspell has a heap buffer overflow in acommon::ObjStack::dup_top
CVE-STATUS: Fixed
CVE-REV: To close, execute command: sudo dnf update aspell

OSVersionArchitecturePackageVersionFilename
ROSAanynoarchaspell< 0.60.8UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ROSA	any	noarch	aspell	< 0.60.8	UNKNOWN

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

Low

EPSS

0.001

Percentile

30.7%

JSON

Related for ROSA-SA-2024-2425