ALT-PU-2022-2540

Критический

ALT-PU-2022-2540: package minetest update to version 5.6.0-alt1

Источник

errata.altlinux.org

Дата публикации

02.09.2022

Дата обновления

13.11.2024

Устраненные уязвимости

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades minetest to version 5.6.0-alt1.

Устраненные уязвимости3

CVE-2022-24300

Критический 9.8

Дата публикации: 02.02.2022

Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection.

CVSS 3.1

Критический 9.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

CVSS 2.0

Высокий 7.5

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Ссылки

CVE-2022-24300 https://nvd.nist.gov/vuln/detail/CVE-2022-24300

Ссылки1

ALT-PU-2022-2540 https://errata.altlinux.org/ALT-PU-2022-2540

Связанные уязвимости

ALT-PU-2021-1448

CVSS3: 9.8

altlinux

больше 5 лет назад

ALT-PU-2021-1448: package `minetest` update to version 5.4.0-alt1

CVE-2022-24300

CVSS3: 9.8

ubuntu

почти 5 лет назад

Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection.

CVE-2022-24300

CVSS3: 9.8

nvd

почти 5 лет назад

Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection.

CVE-2022-24300

CVSS3: 9.8

debian

почти 5 лет назад

Minetest before 5.4.0 allows attackers to add or modify arbitrary meta ...

GHSA-f7m8-fvp5-fpmw

CVSS3: 9.8

github

больше 4 лет назад

Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection.