Lucene search

ROSA LABROSA-SA-2021-1961

HistoryJul 02, 2021 - 6:04 p.m.

Advisory ROSA-SA-2021-1961

2021-07-0218:04:27

ROSA LAB

abf.rosalinux.ru

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

0.004 Low

EPSS

Percentile

74.8%

JSON

Software: redland 1.0.16
OS: Cobalt 7.9

CVE-ID: CVE-2012-0037
CVE-Crit: HIGH
CVE-DESC: Redland Raptor (also known as libraptor) before 2.0.7, used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1 and other products, allows remote attackers, with the help of the user, to read arbitrary files via a crafted XML external object (XXE) declaration and a link in an RDF document.
CVE-STATUS: default
CVE-REV: default

OSVersionArchitecturePackageVersionFilename
Cobaltanynoarchredland< 1.0.16UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Cobalt	any	noarch	redland	< 1.0.16	UNKNOWN

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

0.004 Low

EPSS

Percentile

74.8%

JSON

Related for ROSA-SA-2021-1961