Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2017.0083
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2017-0083)
Zusammenfassung:	The remote host is missing an update for the 'tnef' package(s) announced via the MGASA-2017-0083 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'tnef' package(s) announced via the MGASA-2017-0083 advisory. Vulnerability Insight: An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapi_attr.c:mapi_attr_read(). These might lead to invalid read and write operations, controlled by an attacker. (CVE-2017-6307) An issue was discovered in tnef before 1.4.13. Several Integer Overflows, which can lead to Heap Overflows, have been identified in the functions that wrap memory allocation. (CVE-2017-6308) An issue was discovered in tnef before 1.4.13. Two type confusions have been identified in the parse_file() function. These might lead to invalid read and write operations, controlled by an attacker. (CVE-2017-6309) An issue was discovered in tnef before 1.4.13. Four type confusions have been identified in the file_add_mapi_attrs() function. These might lead to invalid read and write operations, controlled by an attacker. (CVE-2017-6310) Affected Software/OS: 'tnef' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-6307 BugTraq ID: 96427 http://www.securityfocus.com/bid/96427 Debian Security Information: DSA-3798 (Google Search) http://www.debian.org/security/2017/dsa-3798 https://security.gentoo.org/glsa/201708-02 https://github.com/verdammelt/tnef/blob/master/ChangeLog https://github.com/verdammelt/tnef/commit/1a17af1ed0c791aec44dbdc9eab91218cc1e335a https://www.x41-dsec.de/lab/advisories/x41-2017-004-tnef/ Common Vulnerability Exposure (CVE) ID: CVE-2017-6308 https://github.com/verdammelt/tnef/commit/c5044689e50039635e7700fe2472fd632ac77176 Common Vulnerability Exposure (CVE) ID: CVE-2017-6309 https://github.com/verdammelt/tnef/commit/8dccf79857ceeb7a6d3e42c1e762e7b865d5344d Common Vulnerability Exposure (CVE) ID: CVE-2017-6310
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.