Upstream information
Description
libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c.SUSE information
Overall state of this security issue: Resolved
This issue is currently not rated by SUSE as it is not affecting the SUSE Enterprise products.
| CVSS detail | National Vulnerability Database | 
|---|---|
| Base Score | 4.3 | 
| Vector | AV:N/AC:M/Au:N/C:N/I:N/A:P | 
| Access Vector | Network | 
| Access Complexity | Medium | 
| Authentication | None | 
| Confidentiality Impact | None | 
| Integrity Impact | None | 
| Availability Impact | Partial | 
| CVSS detail | National Vulnerability Database | SUSE | 
|---|---|---|
| Base Score | 6.5 | 3.3 | 
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L | 
| Attack Vector | Network | Local | 
| Attack Complexity | Low | Low | 
| Privileges Required | None | None | 
| User Interaction | Required | Required | 
| Scope | Unchanged | Unchanged | 
| Confidentiality Impact | None | None | 
| Integrity Impact | None | None | 
| Availability Impact | High | Low | 
| CVSSv3 Version | 3 | 3 | 
SUSE Security Advisories:
- openSUSE-SU-2019:2095-1, published Fri Dec 8 15:48:43 2023
- openSUSE-SU-2019:2096-1, published Fri Dec 8 15:48:43 2023
- openSUSE-SU-2019:2129-1, published Fri Dec 8 15:48:43 2023
List of released packages
| Product(s) | Fixed package version(s) | References | 
|---|---|---|
| SUSE Package Hub 15 SP1 | 
 | Patchnames: openSUSE-2019-2129 | 
| SUSE Package Hub 15 | 
 | Patchnames: openSUSE-2019-2129 | 
| openSUSE Leap 15.0 | 
 | Patchnames: openSUSE-2019-2095 | 
| openSUSE Leap 15.1 | 
 | Patchnames: openSUSE-2019-2096 | 
| openSUSE Tumbleweed | 
 | Patchnames: openSUSE-Tumbleweed-2024-10957 | 
SUSE Timeline for this CVE
CVE page created: Thu Aug 29 11:22:34 2019CVE page last modified: Mon Oct 6 19:22:30 2025
