Test Kennung:	1.3.6.1.4.1.25623.1.0.871723
Kategorie:	Red Hat Local Security Checks
Titel:	RedHat Update for expat RHSA-2016:2824-01
Zusammenfassung:	The remote host is missing an update for the 'expat'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'expat' package(s) announced via the referenced advisory. Vulnerability Insight: Expat is a C library for parsing XML documents. Security Fix(es): * An out-of-bounds read flaw was found in the way Expat processed certain input. A remote attacker could send specially crafted XML that, when parsed by an application using the Expat library, would cause that application to crash or, possibly, execute arbitrary code with the permission of the user running the application. (CVE-2016-0718) Red Hat would like to thank Gustavo Grieco for reporting this issue. Affected Software/OS: expat on Red Hat Enterprise Linux Desktop (v. 6), Red Hat Enterprise Linux Server (v. 6), Red Hat Enterprise Linux Server (v. 7), Red Hat Enterprise Linux Workstation (v. 6) Solution: Please Install the Updated Packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2016-0718 1036348 http://www.securitytracker.com/id/1036348 1036415 http://www.securitytracker.com/id/1036415 1037705 http://www.securitytracker.com/id/1037705 20170227 CVE-2016-9892 - Remote Code Execution as Root via ESET Endpoint Antivirus 6 http://seclists.org/fulldisclosure/2017/Feb/68 90729 http://www.securityfocus.com/bid/90729 APPLE-SA-2016-07-18-1 http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html DSA-3582 http://www.debian.org/security/2016/dsa-3582 GLSA-201701-21 https://security.gentoo.org/glsa/201701-21 RHSA-2016:2824 http://rhn.redhat.com/errata/RHSA-2016-2824.html RHSA-2018:2486 https://access.redhat.com/errata/RHSA-2018:2486 SUSE-SU-2016:1508 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.html SUSE-SU-2016:1512 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.html USN-2983-1 http://www.ubuntu.com/usn/USN-2983-1 USN-3044-1 http://www.ubuntu.com/usn/USN-3044-1 [oss-security] 20160517 CVE-2016-0718: Expat XML Parser Crashes on Malformed Input http://www.openwall.com/lists/oss-security/2016/05/17/12 http://packetstormsecurity.com/files/141350/ESET-Endpoint-Antivirus-6-Remote-Code-Execution.html http://support.eset.com/ca6333/ http://www.mozilla.org/security/announce/2016/mfsa2016-68.html http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html https://bugzilla.mozilla.org/show_bug.cgi?id=1236923 https://bugzilla.redhat.com/show_bug.cgi?id=1296102 https://kc.mcafee.com/corporate/index?page=content&id=SB10365 https://source.android.com/security/bulletin/2016-11-01.html https://support.apple.com/HT206903 https://www.tenable.com/security/tns-2016-20 openSUSE-SU-2016:1441 http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.html openSUSE-SU-2016:1523 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.html openSUSE-SU-2016:1964 http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html openSUSE-SU-2016:2026 http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html
Copyright	Copyright (C) 2016 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.