Mageia
Vendor:
First CVE: May 8, 2014 · Active for 12 years
35
Total CVEs
More Total CVEs than 92% of tracked products
11.7
Avg CVEs / Year
Higher CVE frequency than 93% of tracked products
5.1
Avg CVSS
Higher Avg CVSS than 6% of tracked products
5.7%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Mageia over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 8, 2014
12 years ago
Most Recent CVE
Aug 25, 2017
3,259 days ago
CVE Severity & Scoring
Mageia35 CVEs
31%
54%
9%
All CVEs352,785 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local1 (2.9%)
Network3 (8.6%)
Unknown31 (88.6%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low3 (8.6%)
High1 (2.9%)
Unknown31 (88.6%)
User Interaction
None2 (5.7%)
Unknown31 (88.6%)
Required2 (5.7%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None4 (11.4%)
Unknown31 (88.6%)
Top CVEs
Signals from CVEs in this product scope (35 CVEs).
35 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-6271CRITICAL GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a cra | Sep 24, 2014 | 9.8 | 99 | YES | YES |
CVE-2014-7169CRITICAL GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to wri | Sep 25, 2014 | 9.8 | 98 | YES | YES |
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain clear | Oct 15, 2014 | 3.4 | 78 | NO | YES |
CVE-2014-9087HIGH Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service (crash) via a crafted OID in a (1) | Dec 1, 2014 | 7.5 | 26 | NO | NO |
CVE-2014-5461MEDIUM Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service (crash) via a small number of | Sep 4, 2014 | 5.0 | 24 | NO | NO |
CVE-2014-9274HIGH UnRTF allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code as demonstrated by a file containing the string "{\cb-999999999". | Dec 9, 2014 | 7.5 | 21 | NO | NO |
CVE-2014-7204MEDIUM jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite loop and CPU and disk consumption) via a crafted JavaScript file. | Oct 7, 2014 | 5.0 | 21 | NO | NO |
CVE-2013-4159HIGH ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact related to "several temp file vulnerabilities" in (1) tcp/tcp_conne | Aug 6, 2014 | 7.5 | 20 | NO | NO |
CVE-2015-2296MEDIUM The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a red | Mar 18, 2015 | 6.8 | 19 | NO | NO |
CVE-2014-8104MEDIUM OpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote authenticated users to cause a denial of service (server crash) via a small control chann | Dec 3, 2014 | 6.8 | 19 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (35 CVEs).
CISA KEV
2 CVEs
5.7% of CVEs· Bottom 1%
Metasploit
2 CVEs
5.7% of CVEs· Bottom 1%
Nuclei
1 CVE
2.9% of CVEs· Bottom 1%
ExploitDB
2 CVEs
5.7% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (35 CVEs).
Media Mentions
Signals from CVEs in this product scope (35 CVEs).
Top CNAs Publishing CVEs For Mageia
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 4.0 | 25 | 5.4 | 15.3% | 2 | 3 |
| 4 | 10 | 4.3 | 1.6% | 0 | 0 |
| 3.0 | 12 | 5.8 | 27.8% | 2 | 3 |
| 3 | 8 | 3.6 | 0.9% | 0 | 0 |