ALT-PU-2018-3732

Критический

ALT-PU-2018-3732: package adobe-flash-player update to version 30-alt1.S1

Источник

errata.altlinux.org

Дата публикации

09.08.2018

Дата обновления

09.08.2018

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades adobe-flash-player to version 30-alt1.S1.

Устраненные уязвимости1

CVE-2018-4944

Критический 9.8

Дата публикации: 19.05.2018

CWE-704

Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

CVSS 3.0

Критический 9.8

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

CVSS 2.0

Критический 10

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Ссылки

CVE-2018-4944 https://nvd.nist.gov/vuln/detail/CVE-2018-4944

Ссылки1

ALT-PU-2018-3732 https://errata.altlinux.org/ALT-PU-2018-3732

Связанные уязвимости

CVE-2018-4944

CVSS3: 9.8

ubuntu

больше 8 лет назад

Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

CVE-2018-4944

CVSS3: 8.8

redhat

больше 8 лет назад

Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

CVE-2018-4944

CVSS3: 9.8

nvd

больше 8 лет назад

Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

GHSA-w5rc-5jqm-p8hv

CVSS3: 9.8

github

больше 4 лет назад

Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

ADV180008

msrc

больше 8 лет назад

May 2018 Adobe Flash Security Update