Test Kennung:	1.3.6.1.4.1.25623.1.0.871572
Kategorie:	Red Hat Local Security Checks
Titel:	RedHat Update for xerces-c RHSA-2016:0430-01
Zusammenfassung:	The remote host is missing an update for the 'xerces-c'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'xerces-c' package(s) announced via the referenced advisory. Vulnerability Insight: Xerces-C is a validating XML parser written in a portable subset of C++. It was discovered that the Xerces-C XML parser did not properly process certain XML input. By providing specially crafted XML data to an application using Xerces-C for XML processing, a remote attacker could exploit this flaw to cause an application crash or, possibly, execute arbitrary code with the privileges of the application. (CVE-2016-0729) Red Hat would like to thank Gustavo Grieco for reporting this issue. All xerces-c users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the update, all applications using Xerces-C must be restarted for the update to take effect. Affected Software/OS: xerces-c on Red Hat Enterprise Linux Server (v. 7) Solution: Please Install the Updated Packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2016-0729 BugTraq ID: 83423 http://www.securityfocus.com/bid/83423 Bugtraq: 20160225 CVE-2016-0729: Apache Xerces-C XML Parser Crashes on Malformed Input (Google Search) http://www.securityfocus.com/archive/1/537620/100/0/threaded Debian Security Information: DSA-3493 (Google Search) http://www.debian.org/security/2016/dsa-3493 http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182597.html http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182062.html http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182131.html https://security.gentoo.org/glsa/201612-46 http://packetstormsecurity.com/files/135949/Apache-Xerces-C-XML-Parser-Buffer-Overflow.html https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html http://www.securitytracker.com/id/1035113 SuSE Security Announcement: openSUSE-SU-2016:0966 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-04/msg00012.html SuSE Security Announcement: openSUSE-SU-2016:1121 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-04/msg00086.html SuSE Security Announcement: openSUSE-SU-2016:1808 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-07/msg00053.html
Copyright	Copyright (C) 2016 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.