Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-2053
HistoryJun 04, 2014 - 12:00 a.m.

CVE-2014-2053

2014-06-0400:00:00
ubuntu.com
ubuntu.com
14

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.007

Percentile

80.8%

getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x
before 6.0.2, allows remote attackers to read arbitrary files, cause a
denial of service, or possibly have other impact via an XML External Entity
(XXE) attack.

Notes

Author Note
mdeslaur owncloud packages in Ubuntu are now empty

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.007

Percentile

80.8%