Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2017.0057
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2017-0057)
Zusammenfassung:	The remote host is missing an update for the 'gtk-vnc' package(s) announced via the MGASA-2017-0057 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'gtk-vnc' package(s) announced via the MGASA-2017-0057 advisory. Vulnerability Insight: It was found that gtk-vnc code does not properly check boundaries of subrectangle-containing tiles. A malicious server can use this to overwrite parts of the client memory (CVE-2017-5884). In addition, the vnc_connection_server_message() and vnc_color_map_set() functions do not check for integer overflow properly, leading to a malicious server being able to overwrite parts of the client memory (CVE-2017-5885). Affected Software/OS: 'gtk-vnc' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-5884 96016 http://www.securityfocus.com/bid/96016 FEDORA-2017-ab04a91edd https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LGPQ5MQR6SN4DYTEFACHP2PP5RR26KYK/ RHSA-2017:2258 https://access.redhat.com/errata/RHSA-2017:2258 [oss-security] 20170203 CVE request for two input validation flaws in gtk-vnc http://www.openwall.com/lists/oss-security/2017/02/03/5 [oss-security] 20170204 Re: CVE request for two input validation flaws in gtk-vnc http://www.openwall.com/lists/oss-security/2017/02/05/5 https://bugzilla.gnome.org/show_bug.cgi?id=778048 https://git.gnome.org/browse/gtk-vnc/commit/?id=ea0386933214c9178aaea9f2f85049ea3fa3e14a Common Vulnerability Exposure (CVE) ID: CVE-2017-5885 https://bugzilla.gnome.org/show_bug.cgi?id=778050 https://git.gnome.org/browse/gtk-vnc/commit/?id=c8583fd3783c5b811590fcb7bae4ce6e7344963e
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.