Executive Summary
| Summary | |
|---|---|
| Title | konversation security update |
| Informations | |||
|---|---|---|---|
| Name | DSA-3068 | First vendor Publication | 2014-11-07 |
| Vendor | Debian | Last vendor Modification | 2014-11-07 |
| Severity (Vendor) | N/A | Revision | 1 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 5 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| It was discovered that Konversation, an IRC client for KDE, could by crashed when receiving malformed messages using FiSH encryption. For the stable distribution (wheezy), this problem has been fixed in version 1.4-1+deb7u1. For the unstable distribution (sid), this problem has been fixed in version 1.5-1. We recommend that you upgrade your konversation packages. |
Original Source
| Url : http://www.debian.org/security/2014/dsa-3068 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-125 | Out-of-bounds Read |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:27742 | |||
| Oval ID: | oval:org.mitre.oval:def:27742 | ||
| Title: | DSA-3068-1 -- konversation security update | ||
| Description: | It was discovered that Konversation, an IRC client for KDE, could be crashed when receiving malformed messages using FiSH encryption. | ||
| Family: | unix | Class: | patch |
| Reference(s): | DSA-3068-1 CVE-2014-8483 | Version: | 3 |
| Platform(s): | Debian GNU/Linux 7.0 Debian GNU/kFreeBSD 7.0 | Product(s): | konversation |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:28022 | |||
| Oval ID: | oval:org.mitre.oval:def:28022 | ||
| Title: | DSA-3063-1 -- quassel security update | ||
| Description: | An out-of-bounds read vulnerability was discovered in Quassel-core, one of the components of the distributed IRC client Quassel. An attacker can send a crafted message that crash to component causing a denial of services or disclosure of information from process memory. | ||
| Family: | unix | Class: | patch |
| Reference(s): | DSA-3063-1 CVE-2014-8483 | Version: | 3 |
| Platform(s): | Debian GNU/Linux 7.0 Debian GNU/kFreeBSD 7.0 | Product(s): | quassel |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:28136 | |||
| Oval ID: | oval:org.mitre.oval:def:28136 | ||
| Title: | USN-2401-1 -- Konversation vulnerability | ||
| Description: | Manuel Nickschas discovered that Konversation did not properly perform input sanitization when using Blowfish ECB encryption. A remote attacker could exploit this to cause a denial of service. | ||
| Family: | unix | Class: | patch |
| Reference(s): | USN-2401-1 CVE-2014-8483 | Version: | 3 |
| Platform(s): | Ubuntu 12.04 | Product(s): | konversation |
| Definition Synopsis: | |||
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 1 | |
| Os | 1 | |
| Os | 1 | |
| Os | 3 |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2015-03-26 | Name : The remote Debian host is missing a security update. File : debian_DLA-168.nasl - Type : ACT_GATHER_INFO |
| 2015-03-24 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2015-251.nasl - Type : ACT_GATHER_INFO |
| 2014-11-17 | Name : The remote Fedora host is missing a security update. File : fedora_2014-13702.nasl - Type : ACT_GATHER_INFO |
| 2014-11-17 | Name : The remote Fedora host is missing a security update. File : fedora_2014-13791.nasl - Type : ACT_GATHER_INFO |
| 2014-11-13 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2014-659.nasl - Type : ACT_GATHER_INFO |
| 2014-11-12 | Name : The remote Fedora host is missing a security update. File : fedora_2014-13837.nasl - Type : ACT_GATHER_INFO |
| 2014-11-11 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2014-638.nasl - Type : ACT_GATHER_INFO |
| 2014-11-11 | Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-2401-1.nasl - Type : ACT_GATHER_INFO |
| 2014-11-10 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-3068.nasl - Type : ACT_GATHER_INFO |
| 2014-11-06 | Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_0167f5ad64ea11e498c100269ee29e57.nasl - Type : ACT_GATHER_INFO |
| 2014-11-04 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-3063.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-11-11 13:25:59 |
|
| 2014-11-07 13:23:59 |
|
