Lucene search

K
mageiaGentoo FoundationMGASA-2022-0291
HistoryAug 20, 2022 - 1:04 p.m.

Updated wavpack packages fix security vulnerability

2022-08-2013:04:13
Gentoo Foundation
advisories.mageia.org
23
security vulnerability fix
wavpack packages
null pointer dereference
cve-2022-2476
unix

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

36.0%

Null pointer dereference in wvunpack (CVE-2022-2476)

OSVersionArchitecturePackageVersionFilename
Mageia8noarchwavpack< 5.5.0-1wavpack-5.5.0-1.mga8

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

36.0%