DebianDEBIAN:DLA-164-1:32ECD[SECURITY] [DLA 164-1] unace security update
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
AI Score
Confidence
High
EPSS
Percentile
82.5%
Package : unace
Version : 1.2b-7+deb6u1
CVE ID : CVE-2015-2063
Debian Bug : 775003
Jakub Wilk discovered that unace, an utility to extract, test and view
.ace archives, contained an integer overflow leading to a buffer
overflow. If a user or automated system were tricked into processing a
specially crafted ace archive, an attacker could cause a denial of
service (application crash) or, possibly, execute arbitrary code.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 7 | sparc | unace | < 1.2b-10+deb7u1 | unace_1.2b-10+deb7u1_sparc.deb |
| Debian | 7 | all | unace | < 1.2b-10+deb7u1 | unace_1.2b-10+deb7u1_all.deb |
| Debian | 6 | i386 | unace | < 1.2b-7+deb6u1 | unace_1.2b-7+deb6u1_i386.deb |
| Debian | 7 | s390x | unace | < 1.2b-10+deb7u1 | unace_1.2b-10+deb7u1_s390x.deb |
| Debian | 7 | i386 | unace | < 1.2b-10+deb7u1 | unace_1.2b-10+deb7u1_i386.deb |
| Debian | 7 | kfreebsd-amd64 | unace | < 1.2b-10+deb7u1 | unace_1.2b-10+deb7u1_kfreebsd-amd64.deb |
| Debian | 7 | armhf | unace | < 1.2b-10+deb7u1 | unace_1.2b-10+deb7u1_armhf.deb |
| Debian | 7 | ia64 | unace | < 1.2b-10+deb7u1 | unace_1.2b-10+deb7u1_ia64.deb |
| Debian | 7 | mipsel | unace | < 1.2b-10+deb7u1 | unace_1.2b-10+deb7u1_mipsel.deb |
| Debian | 6 | all | unace | < 1.2b-7+deb6u1 | unace_1.2b-7+deb6u1_all.deb |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
AI Score
Confidence
High
EPSS
Percentile
82.5%