SUSE-SU-2015:0236-1

Einstufung nach Quelle

Keine Quelle nennt einen CVSS-Wert.

Trivys eigenes Label ist CRITICAL. Kritisch laut SUSE.

Beschreibung

flash-player was updated to version 11.2.202.442 to fix 18 security issues. These security issues were fixed: - Use-after-free vulnerabilities that could lead to code execution (CVE-2015-0313, CVE-2015-0315, CVE-2015-0320, CVE-2015-0322). - Memory corruption vulnerabilities that could lead to code execution (CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, CVE-2015-0329, CVE-2015-0330). - Type confusion vulnerabilities that could lead to code execution (CVE-2015-0317, CVE-2015-0319). - Heap buffer overflow vulnerabilities that could lead to code execution (CVE-2015-0323, CVE-2015-0327). - Buffer overflow vulnerability that could lead to code execution (CVE-2015-0324). - Null pointer dereference issues (CVE-2015-0325, CVE-2015-0326, CVE-2015-0328). More information is available at https://helpx.adobe.com/security/products/flash-player/apsb15-04.html

Betroffene Pakete und behobene Versionen

Referenzen

• https://bugzilla.suse.com/915918
• https://lists.suse.com/pipermail/sle-security-updates/2015-February/001211.html
• https://www.suse.com/security/cve/CVE-2015-0313/
• https://www.suse.com/security/cve/CVE-2015-0314/
• https://www.suse.com/security/cve/CVE-2015-0315/
• https://www.suse.com/security/cve/CVE-2015-0316/
• https://www.suse.com/security/cve/CVE-2015-0317/
• https://www.suse.com/security/cve/CVE-2015-0318/