ALT-PU-2023-4287

Высокий

ALT-PU-2023-4287: package admesh update to version 0.98.5-alt1

Источник

errata.altlinux.org

Дата публикации

28.09.2023

Дата обновления

04.02.2026

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades admesh to version 0.98.5-alt1.

Устраненные уязвимости1

CVE-2018-25033

Высокий 8.1

Дата публикации: 08.05.2022

CWE-125

ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_connects_remove_1 (called from stl_remove_degenerate) in connect.c in libadmesh.a. * GHSA-5jrq-582v-9767: Out-of-bounds read in admesh

CVSS 3.1

Высокий 8.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: Required
Scope: Unchanged
Confidentiality: High
Integrity: None
Availability: High

CVSS 2.0

Средний 5.8

AV:N/AC:M/Au:N/C:P/I:N/A:P

Access vector: Network
Complexity: Medium
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: Partial

Ссылки

CVE-2018-25033 https://nvd.nist.gov/vuln/detail/CVE-2018-25033

Ссылки2

ALT-PU-2023-4287 https://errata.altlinux.org/ALT-PU-2023-4287

GHSA-5jrq-582v-9767

https://github.com/advisories/GHSA-5jrq-582v-9767

Связанные уязвимости

CVE-2018-25033

CVSS3: 8.1

ubuntu

больше 4 лет назад

ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_connects_remove_1 (called from stl_remove_degenerate) in connect.c in libadmesh.a.

CVE-2018-25033

CVSS3: 8.1

nvd

больше 4 лет назад

ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_connects_remove_1 (called from stl_remove_degenerate) in connect.c in libadmesh.a.

CVE-2018-25033

CVSS3: 8.1

debian

больше 4 лет назад

ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_ ...

GHSA-5jrq-582v-9767

CVSS3: 8.1

github

больше 4 лет назад

Out-of-bounds read in admesh