ALT-PU-2022-2480

Критический

ALT-PU-2022-2480: package libpano13 update to version 2.9.21-alt1

Источник

errata.altlinux.org

Дата публикации

23.08.2022

Дата обновления

23.08.2022

Устраненные уязвимости

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades libpano13 to version 2.9.21-alt1.

Устраненные уязвимости1

CVE-2021-33293

Критический 9.1

Дата публикации: 10.03.2022

CWE-125

Panorama Tools libpano13 v2.9.20 was discovered to contain an out-of-bounds read in the function panoParserFindOLine() in parser.c.

CVSS 3.1

Критический 9.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: None
Availability: High

CVSS 2.0

Средний 6.4

AV:N/AC:L/Au:N/C:P/I:N/A:P

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: Partial

Ссылки

CVE-2021-33293 https://nvd.nist.gov/vuln/detail/CVE-2021-33293

Ссылки1

ALT-PU-2022-2480 https://errata.altlinux.org/ALT-PU-2022-2480

Связанные уязвимости

CVE-2021-33293

CVSS3: 9.1

ubuntu

больше 4 лет назад

Panorama Tools libpano13 v2.9.20 was discovered to contain an out-of-bounds read in the function panoParserFindOLine() in parser.c.

CVE-2021-33293

CVSS3: 9.1

nvd

больше 4 лет назад

Panorama Tools libpano13 v2.9.20 was discovered to contain an out-of-bounds read in the function panoParserFindOLine() in parser.c.

CVE-2021-33293

CVSS3: 9.1

debian

больше 4 лет назад

Panorama Tools libpano13 v2.9.20 was discovered to contain an out-of-b ...

openSUSE-SU-2022:10208-1

suse-cvrf

почти 4 года назад

Security update for libpano

GHSA-fw2x-cw3j-w7vv

CVSS3: 9.1

github

больше 4 лет назад

Panorama Tools libpano13 v2.9.20 was discovered to contain an out-of-bounds read in the function panoParserFindOLine() in parser.c.