Lucene search

K
debianDebianDEBIAN:DLA-3387-2:37D26
HistoryApr 10, 2023 - 9:42 a.m.

[SECURITY] [DLA 3387-2] udisks2 regression update

2023-04-1009:42:54
lists.debian.org
7
security tracker
fix
upgrade
regression
buster
cve-2021-3802
debian 10
udisks2

CVSS2

6.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:N/I:N/A:C

CVSS3

4.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H

AI Score

4.2

Confidence

High

EPSS

0.001

Percentile

34.0%


Debian LTS Advisory DLA-3387-2 [email protected]
https://www.debian.org/lts/security/ Tobias Frost
April 10, 2023 https://wiki.debian.org/LTS

Package : udisks2
Version : 2.8.1-4+deb10u2
Debian Bug : 1034124

A regression was reported that the fix for CVE-2021-3802 broken mounting
allow-listed mount option/value pairs, for example errors=remount-ro.

For Debian 10 buster, this problem has been fixed in version
2.8.1-4+deb10u2.

We recommend that you upgrade your udisks2 packages.

For the detailed security status of udisks2 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/udisks2

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
Attachment:
signature.asc
Description: PGP signature

CVSS2

6.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:N/I:N/A:C

CVSS3

4.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H

AI Score

4.2

Confidence

High

EPSS

0.001

Percentile

34.0%