Canonical Acpi-Support vulnerabilities

2 CVEs affecting Canonical Acpi-Support, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-0484, published 2014-09-22.

More from Canonical.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-0484, published 2014-09-22. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. The Debian acpi-support package before 0.140-5+deb7u3 allows local users to gain privileges via vectors related to the "user's environment."
• CVE-2014-1419, published 2014-07-24. Medium severity, CVSS 6.9. EPSS: 0.3% chance of exploitation in the next 30 days. Race condition in the power policy functions in policy-funcs in acpi-support before 0.142 allows local users to gain privileges via unspecified vectors.