Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2014.0056
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2014-0056)
Zusammenfassung:	The remote host is missing an update for the 'plexus-archiver' package(s) announced via the MGASA-2014-0056 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'plexus-archiver' package(s) announced via the MGASA-2014-0056 advisory. Vulnerability Insight: Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service (CPU consumption) via a file with many repeating inputs (CVE-2012-2098). plexus-archiver used an embedded copy of the affected code from Apache Commons Compress, and therefore was affected by this. It has been patched to use the apache-commons-compress package, in which this issue has already been fixed, for bzip2 compression and decompression. Affected Software/OS: 'plexus-archiver' package(s) on Mageia 3. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2098 BugTraq ID: 53676 http://www.securityfocus.com/bid/53676 Bugtraq: 20120523 [CVE-2012-2098] Apache Commons Compress and Apache Ant denial of service vulnerability (Google Search) http://archives.neohapsis.com/archives/bugtraq/2012-05/0130.html http://ant.apache.org/security.html http://commons.apache.org/compress/security.html http://www-01.ibm.com/support/docview.wss?uid=swg21644047 http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081697.html http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081746.html http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105049.html http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105060.html http://packetstormsecurity.org/files/113014/Apache-Commons-Compress-Apache-Ant-Denial-Of-Service.html https://www.oracle.com/security-alerts/cpujan2021.html https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E http://www.openwall.com/lists/oss-security/2023/09/13/3 http://osvdb.org/82161 http://www.securitytracker.com/id?1027096 http://secunia.com/advisories/49255 http://secunia.com/advisories/49286 XForce ISS Database: apache-commons-ant-bzip2-dos(75857) https://exchange.xforce.ibmcloud.com/vulnerabilities/75857
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.