5 - MDVSA-2013:107

Executive Summary

Informations
Name	MDVSA-2013:107	First vendor Publication	2013-04-10
Vendor	Mandriva	Last vendor Modification	2013-04-10
Severity (Vendor)	N/A	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:P)
Cvss Base Score	5	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Updated ocaml-xml-light packages fix security vulnerability:

OCaml Xml-Light Library before r234 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via unspecified vectors (CVE-2012-3514).

Original Source

Url : http://www.mandriva.com/security/advisories?name=MDVSA-2013:107

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-310	Cryptographic Issues

OpenVAS Exploits

Date	Description
2012-09-04	Name : Fedora Update for ocaml-xml-light FEDORA-2012-12500 File : nvt/gb_fedora_2012_12500_ocaml-xml-light_fc17.nasl

Nessus® Vulnerability Scanner

Date	Description
2013-04-20	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2013-107.nasl - Type : ACT_GATHER_INFO
2012-09-18	Name : The remote Fedora host is missing a security update. File : fedora_2012-12392.nasl - Type : ACT_GATHER_INFO
2012-08-31	Name : The remote Fedora host is missing a security update. File : fedora_2012-12500.nasl - Type : ACT_GATHER_INFO