CVE-2007-5933

2007-11-1300:00:00

ubuntu.com

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

EPSS

0.028

Percentile

90.9%

JSON

Pioneers (formerly gnocatan) before 0.11.3 allows remote attackers to cause
a denial of service (crash) by triggering a delete operation while the
Session object is still being used, as demonstrated by causing a “Broken
pipe” error.

Bugs

<https://bugs.launchpad.net/ubuntu/+source/pioneers/+bug/163056>

Notes

Author	Note
wgrant	Fixed in Debian’s 0.11.3-2. Upstream released 0.11.3, but it didn’t have the entire fix.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchpioneers< 0.9.55-1ubuntu0.1UNKNOWN
ubuntu6.10noarchpioneers< 0.10.2-1ubuntu0.1UNKNOWN
ubuntu7.04noarchpioneers< 0.10.2-3ubuntu1.7.04UNKNOWN
ubuntu7.10noarchpioneers< 0.10.2-3ubuntu1.7.10UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	pioneers	< 0.9.55-1ubuntu0.1	UNKNOWN
ubuntu	6.10	noarch	pioneers	< 0.10.2-1ubuntu0.1	UNKNOWN
ubuntu	7.04	noarch	pioneers	< 0.10.2-3ubuntu1.7.04	UNKNOWN
ubuntu	7.10	noarch	pioneers	< 0.10.2-3ubuntu1.7.10	UNKNOWN