Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2016.0328
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2016-0328)
Zusammenfassung:	The remote host is missing an update for the 'zookeeper' package(s) announced via the MGASA-2016-0328 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'zookeeper' package(s) announced via the MGASA-2016-0328 advisory. Vulnerability Insight: Lyon Yang discovered that the C client shells cli_st and cli_mt of Apache Zookeeper were affected by a buffer overflow vulnerability associated with parsing of the input command when using the 'cmd:' batch mode syntax. If the command string exceeds 1024 characters a buffer overflow will occur (CVE-2016-5017). Affected Software/OS: 'zookeeper' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2016-5017 BugTraq ID: 93044 http://www.securityfocus.com/bid/93044 https://git-wip-us.apache.org/repos/asf?p=zookeeper.git;a=commitdiff;h=27ecf981a15554dc8e64a28630af7a5c9e2bdf4f https://git-wip-us.apache.org/repos/asf?p=zookeeper.git;a=commitdiff;h=f09154d6648eeb4ec5e1ac8a2bacbd2f8c87c14a https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html https://zookeeper.apache.org/security.html#CVE-2016-5017 http://packetstormsecurity.com/files/138755/ZooKeeper-3.4.8-3.5.2-Buffer-Overflow.html https://www.oracle.com/security-alerts/cpujul2020.html https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272@%3Cissues.activemq.apache.org%3E https://lists.apache.org/thread.html/r4b743f407244294f316325458ccaabfce9cd70ca3a6423dbe574035c@%3Cnotifications.dubbo.apache.org%3E https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3@%3Ccommits.nifi.apache.org%3E https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b@%3Ccommits.nifi.apache.org%3E http://www.openwall.com/lists/oss-security/2016/09/17/3
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.