RedHatRHSA-2019:3898(RHSA-2019:3898) Moderate: libcomps security update
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
Percentile
77.9%
Libcomps is library for structure-like manipulation with content of comps XML files. Supports read/write XML file, structure(s) modification.
Security Fix(es):
- libcomps: use after free when merging two objmrtrees (CVE-2019-3817)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | s390x | libcomps | < 0.1.8-13.el7 | libcomps-0.1.8-13.el7.s390x.rpm |
| RedHat | 7 | s390x | libcomps-debuginfo | < 0.1.8-13.el7 | libcomps-debuginfo-0.1.8-13.el7.s390x.rpm |
| RedHat | 7 | ppc64le | libcomps-devel | < 0.1.8-13.el7 | libcomps-devel-0.1.8-13.el7.ppc64le.rpm |
| RedHat | 7 | x86_64 | libcomps-debuginfo | < 0.1.8-13.el7 | libcomps-debuginfo-0.1.8-13.el7.x86_64.rpm |
| RedHat | 7 | ppc64le | libcomps | < 0.1.8-13.el7 | libcomps-0.1.8-13.el7.ppc64le.rpm |
| RedHat | 7 | x86_64 | libcomps-devel | < 0.1.8-13.el7 | libcomps-devel-0.1.8-13.el7.x86_64.rpm |
| RedHat | 7 | noarch | python-libcomps-doc | < 0.1.8-13.el7 | python-libcomps-doc-0.1.8-13.el7.noarch.rpm |
| RedHat | 7 | ppc64le | python2-libcomps | < 0.1.8-13.el7 | python2-libcomps-0.1.8-13.el7.ppc64le.rpm |
| RedHat | 7 | s390x | libcomps-devel | < 0.1.8-13.el7 | libcomps-devel-0.1.8-13.el7.s390x.rpm |
| RedHat | 7 | noarch | libcomps-doc | < 0.1.8-13.el7 | libcomps-doc-0.1.8-13.el7.noarch.rpm |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
Percentile
77.9%