Lucene search

K
ubuntuUbuntuUSN-994-1
HistorySep 29, 2010 - 12:00 a.m.

libHX vulnerability

2010-09-2900:00:00
ubuntu.com
38

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.131

Percentile

95.5%

Releases

  • Ubuntu 10.04
  • Ubuntu 9.10
  • Ubuntu 9.04
  • Ubuntu 8.04

Packages

  • libhx -

Details

It was discovered that libHX incorrectly handled certain parameters to the
HX_split function. An attacker could use this flaw to cause a denial of
service or possibly execute arbitrary code with the privileges of the user.

The default compiler options for affected releases should reduce the
vulnerability to a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu9.10noarchlibhx18< 2.9-3ubuntu0.1UNKNOWN
Ubuntu9.10noarchlibhx-dev< 2.9-3ubuntu0.1UNKNOWN
Ubuntu9.10noarchlibhx-doc< 2.9-3ubuntu0.1UNKNOWN
Ubuntu9.04noarchlibhx14< 1.28-1ubuntu0.1UNKNOWN
Ubuntu9.04noarchlibhx-dev< 1.28-1ubuntu0.1UNKNOWN
Ubuntu8.04noarchlibhx10< 1.10.2-2ubuntu0.1UNKNOWN
Ubuntu8.04noarchlibhx-dev< 1.10.2-2ubuntu0.1UNKNOWN
Ubuntu10.04noarchlibhx22< 3.2-1ubuntu0.1UNKNOWN
Ubuntu10.04noarchlibhx-dev< 3.2-1ubuntu0.1UNKNOWN
Ubuntu10.04noarchlibhx-doc< 3.2-1ubuntu0.1UNKNOWN

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.131

Percentile

95.5%