Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.131308
Kategorie:Mageia Linux Local Security Checks
Titel:Mageia Linux Local Check: mgasa-2016-0138
Zusammenfassung:Mageia Linux Local Security Checks mgasa-2016-0138
Beschreibung:Summary:
Mageia Linux Local Security Checks mgasa-2016-0138

Vulnerability Insight:
Updated mercurial packages fix security vulnerabilities: Blake Burkhart discovered that Mercurial allows URLs for Git subrepositories that could result in arbitrary code execution on clone (CVE-2016-3068). Blake Burkhart discovered that Mercurial allows arbitrary code execution when converting Git repositories with specially crafted names (CVE-2016-3069). It was discovered that Mercurial does not properly perform bounds-checking in its binary delta decoder, which may be exploitable for remote code execution via clone, push or pull (CVE-2016-3630).

Solution:
Update the affected packages to the latest available version.

CVSS Score:
6.8

CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2016-3068
BugTraq ID: 85733
http://www.securityfocus.com/bid/85733
Debian Security Information: DSA-3542 (Google Search)
http://www.debian.org/security/2016/dsa-3542
http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181505.html
http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181542.html
https://security.gentoo.org/glsa/201612-19
RedHat Security Advisories: RHSA-2016:0706
http://rhn.redhat.com/errata/RHSA-2016-0706.html
SuSE Security Announcement: SUSE-SU-2016:1010 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00016.html
SuSE Security Announcement: SUSE-SU-2016:1011 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00017.html
SuSE Security Announcement: openSUSE-SU-2016:1016 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00018.html
SuSE Security Announcement: openSUSE-SU-2016:1073 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00043.html
Common Vulnerability Exposure (CVE) ID: CVE-2016-3069
Common Vulnerability Exposure (CVE) ID: CVE-2016-3630
CopyrightCopyright (C) 2016 Eero Volotinen

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2021 E-Soft Inc. Alle Rechte vorbehalten.