Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2017.0174
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2017-0174)
Zusammenfassung:	The remote host is missing an update for the 'libytnef' package(s) announced via the MGASA-2017-0174 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'libytnef' package(s) announced via the MGASA-2017-0174 advisory. Vulnerability Insight: Several issues were discovered in libytnef, a library used to decode application/ms-tnef e-mail attachments. Multiple heap overflows, out-of-bound writes and reads, NULL pointer dereferences and infinite loops could be exploited by tricking a user into opening a maliciously crafted winmail.dat file (CVE-2017-6298, CVE-2017-6299, CVE-2017-6300, CVE-2017-6301, CVE-2017-6302, CVE-2017-6303, CVE-2017-6304, CVE-2017-6305, CVE-2017-6306, CVE-2017-6800, CVE-2017-6801, CVE-2017-6802). A heap-buffer-overflow vulnerability in libytnef due to an incorrect boundary checking in SIZECHCK macro in lib/ytnef.c (CVE-2017-9058). Affected Software/OS: 'libytnef' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-6298 BugTraq ID: 96423 http://www.securityfocus.com/bid/96423 Debian Security Information: DSA-3846 (Google Search) http://www.debian.org/security/2017/dsa-3846 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/ http://www.openwall.com/lists/oss-security/2017/02/15/4 https://github.com/Yeraze/ytnef/pull/27 https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/ Common Vulnerability Exposure (CVE) ID: CVE-2017-6299 Common Vulnerability Exposure (CVE) ID: CVE-2017-6300 Common Vulnerability Exposure (CVE) ID: CVE-2017-6301 Common Vulnerability Exposure (CVE) ID: CVE-2017-6302 Common Vulnerability Exposure (CVE) ID: CVE-2017-6303 Common Vulnerability Exposure (CVE) ID: CVE-2017-6304 Common Vulnerability Exposure (CVE) ID: CVE-2017-6305 Common Vulnerability Exposure (CVE) ID: CVE-2017-6306 Common Vulnerability Exposure (CVE) ID: CVE-2017-6800 Common Vulnerability Exposure (CVE) ID: CVE-2017-6801 Common Vulnerability Exposure (CVE) ID: CVE-2017-6802 Common Vulnerability Exposure (CVE) ID: CVE-2017-9058 https://usn.ubuntu.com/3667-1/
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.