Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.131177
Kategorie:Mageia Linux Local Security Checks
Titel:Mageia Linux Local Check: mgasa-2016-0012
Zusammenfassung:Mageia Linux Local Security Checks mgasa-2016-0012
Beschreibung:Summary:
Mageia Linux Local Security Checks mgasa-2016-0012

Vulnerability Insight:
It was found that the Apache commons-collections library permitted code execution when deserializing objects involving a specially constructed chain of classes. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using the commons-collections library (CVE-2015-7501). With this update, deserialization of certain classes in the commons-collections library is no longer allowed. Applications that require those classes to be deserialized can use the system property org.apache.commons.collections.enableUnsafeSerialization to re-enable their deserialization.

Solution:
Update the affected packages to the latest available version.

CVSS Score:
10.0

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2015-7501
BugTraq ID: 78215
http://www.securityfocus.com/bid/78215
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
https://access.redhat.com/security/vulnerabilities/2059393
https://access.redhat.com/solutions/2045023
https://bugzilla.redhat.com/show_bug.cgi?id=1279330
https://www.oracle.com/security-alerts/cpujul2020.html
RedHat Security Advisories: RHSA-2015:2500
http://rhn.redhat.com/errata/RHSA-2015-2500.html
RedHat Security Advisories: RHSA-2015:2501
http://rhn.redhat.com/errata/RHSA-2015-2501.html
RedHat Security Advisories: RHSA-2015:2502
http://rhn.redhat.com/errata/RHSA-2015-2502.html
RedHat Security Advisories: RHSA-2015:2514
http://rhn.redhat.com/errata/RHSA-2015-2514.html
RedHat Security Advisories: RHSA-2015:2516
http://rhn.redhat.com/errata/RHSA-2015-2516.html
RedHat Security Advisories: RHSA-2015:2517
http://rhn.redhat.com/errata/RHSA-2015-2517.html
RedHat Security Advisories: RHSA-2015:2521
http://rhn.redhat.com/errata/RHSA-2015-2521.html
RedHat Security Advisories: RHSA-2015:2522
http://rhn.redhat.com/errata/RHSA-2015-2522.html
RedHat Security Advisories: RHSA-2015:2524
http://rhn.redhat.com/errata/RHSA-2015-2524.html
RedHat Security Advisories: RHSA-2015:2536
https://rhn.redhat.com/errata/RHSA-2015-2536.html
RedHat Security Advisories: RHSA-2015:2670
http://rhn.redhat.com/errata/RHSA-2015-2670.html
RedHat Security Advisories: RHSA-2015:2671
http://rhn.redhat.com/errata/RHSA-2015-2671.html
RedHat Security Advisories: RHSA-2016:0040
http://rhn.redhat.com/errata/RHSA-2016-0040.html
RedHat Security Advisories: RHSA-2016:1773
http://rhn.redhat.com/errata/RHSA-2016-1773.html
http://www.securitytracker.com/id/1034097
http://www.securitytracker.com/id/1037052
http://www.securitytracker.com/id/1037053
http://www.securitytracker.com/id/1037640
CopyrightCopyright (C) 2016 Eero Volotinen

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2021 E-Soft Inc. Alle Rechte vorbehalten.