Lucene search

K
mageiaGentoo FoundationMGASA-2023-0037
HistoryFeb 07, 2023 - 3:06 a.m.

Updated java/timezone packages fix security vulnerability

2023-02-0703:06:39
Gentoo Foundation
advisories.mageia.org
34
java
timezone
security
vulnerability
corba
deserialization
cve-2023-21830
handshake
dos
dtls
soundbank
url
remote loading

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

0.001 Low

EPSS

Percentile

45.9%

Improper restrictions in CORBA deserialization. (CVE-2023-21830) Handshake DoS attack against DTLS connections. (CVE-2023-21835) Soundbank URL remote loading. (CVE-2023-21843)

OSVersionArchitecturePackageVersionFilename
Mageia8noarchjava< 1.8.0-openjdk-1.8.0.362.b09-1java-1.8.0-openjdk-1.8.0.362.b09-1.mga8
Mageia8noarchjava< 11-openjdk-11.0.18.0.10-1java-11-openjdk-11.0.18.0.10-1.mga8
Mageia8noarchtimezone< 2022g-1timezone-2022g-1.mga8

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

0.001 Low

EPSS

Percentile

45.9%