Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2015.0184
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2015-0184)
Zusammenfassung:	The remote host is missing an update for the 'fcgi' package(s) announced via the MGASA-2015-0184 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'fcgi' package(s) announced via the MGASA-2015-0184 advisory. Vulnerability Insight: Updated fcgi packages fix security vulnerability: FCGI does not perform range checks for file descriptors before use of the FD_SET macro. This FD_SET macro could allow for more than 1024 total file descriptors to be monitored in the closing state. This may allow remote attackers to cause a denial of service (stack memory corruption, and infinite loop or daemon crash) by opening many socket connections to the host and crashing the service (CVE-2012-6687). Affected Software/OS: 'fcgi' package(s) on Mageia 4. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-6687 http://www.openwall.com/lists/oss-security/2015/02/06/4 http://www.openwall.com/lists/oss-security/2015/02/07/4 XForce ISS Database: libfcgi-connections-dos(100696) https://exchange.xforce.ibmcloud.com/vulnerabilities/100696
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.