MEDIUM6.8
Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P
Severity:
Closed issues (3)
MEDIUM6.8
The fixps script in a2ps 4.14 does not use the -dSAFER option when executing gs, which allows context-dependent attackers to delete arbitrary files or execute arbitrary commands via a crafted PostScript file.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-updates/2014-04/msg00021.html
- http://www.debian.org/security/2014/dsa-2892
- http://www.securityfocus.com/bid/66660
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742902
- https://security.gentoo.org/glsa/201701-67
- http://lists.opensuse.org/opensuse-updates/2014-04/msg00021.html
- http://www.debian.org/security/2014/dsa-2892
- http://www.securityfocus.com/bid/66660
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742902
- https://security.gentoo.org/glsa/201701-67
HIGH7.8
Format string vulnerability in GNU a2ps 4.14 allows remote attackers to execute arbitrary code.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 7.8
CVSS:3.x/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H