Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2014.0396
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2014-0396)
Zusammenfassung:	The remote host is missing an update for the 'squid' package(s) announced via the MGASA-2014-0396 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'squid' package(s) announced via the MGASA-2014-0396 advisory. Vulnerability Insight: Updated squid packages fix security vulnerabilities: Due to incorrect buffer management Squid can be caused by an attacker to write outside its allocated SNMP buffer (CVE-2014-6270). Due to incorrect bounds checking Squid pinger binary is vulnerable to denial of service or information leak attack when processing larger than normal ICMP or ICMPv6 packets (CVE-2014-7141). Due to incorrect input validation Squid pinger binary is vulnerable to denial of service or information leak attacks when processing ICMP or ICMPv6 packets (CVE-2014-7142). Affected Software/OS: 'squid' package(s) on Mageia 3, Mageia 4. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2014-6270 BugTraq ID: 69686 http://www.securityfocus.com/bid/69686 https://security.gentoo.org/glsa/201607-01 http://seclists.org/oss-sec/2014/q3/542 http://seclists.org/oss-sec/2014/q3/550 SuSE Security Announcement: SUSE-SU-2016:1996 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html SuSE Security Announcement: SUSE-SU-2016:2089 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html http://www.ubuntu.com/usn/USN-2921-1 XForce ISS Database: squid-cve20146270-bo(95873) https://exchange.xforce.ibmcloud.com/vulnerabilities/95873 Common Vulnerability Exposure (CVE) ID: CVE-2014-7141 BugTraq ID: 69688 http://www.securityfocus.com/bid/69688 http://seclists.org/oss-sec/2014/q3/539 http://seclists.org/oss-sec/2014/q3/612 http://seclists.org/oss-sec/2014/q3/626 http://secunia.com/advisories/60242 http://ubuntu.com/usn/usn-2422-1 Common Vulnerability Exposure (CVE) ID: CVE-2014-7142 BugTraq ID: 70022 http://www.securityfocus.com/bid/70022 http://seclists.org/oss-sec/2014/q3/613
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.