Lucene search

K
mageiaGentoo FoundationMGASA-2014-0543
HistoryDec 21, 2014 - 11:47 p.m.

Updated znc package fixes CVE-2014-9403

2014-12-2123:47:32
Gentoo Foundation
advisories.mageia.org
7

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

EPSS

0.006

Percentile

79.1%

Updated znc packages fix security vulnerability: Adding an already existing channel to a user/network via web admin in ZNC causes a crash if the channel name isn’t prefixed with ‘#’ (CVE-2014-9403).

OSVersionArchitecturePackageVersionFilename
Mageia4noarchznc< 1.0-4.1znc-1.0-4.1.mga4

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

EPSS

0.006

Percentile

79.1%