Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2017.0296
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2017-0296)
Zusammenfassung:	The remote host is missing an update for the 'kernel-tmb' package(s) announced via the MGASA-2017-0296 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'kernel-tmb' package(s) announced via the MGASA-2017-0296 advisory. Vulnerability Insight: This kernel-tmb update is based on upstream 4.9.43 and fixes at least the following security issues: The curseg->segno call in f2fs driver can be malformed so that it will have a value that triggers an out of boundary write that could cause memory corruption on the affected devices, leading to code execution in the kernel context. This would allow for more data to be accessed and controlled by the malware (CVE-2017-10663). The UDP Fragmentation Offload (UFO) feature is vulnerable to out-of-bounds writes causing exploitable memory corruption. If unprivileged user namespaces are available, this bug can be exploited to gain root privileges (CVE-2017-1000112). For other upstream fixes in this update, read the referenced changelogs. Affected Software/OS: 'kernel-tmb' package(s) on Mageia 6. Solution: Please install the updated package(s). CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-1000112 BugTraq ID: 100262 http://www.securityfocus.com/bid/100262 Debian Security Information: DSA-3981 (Google Search) http://www.debian.org/security/2017/dsa-3981 https://www.exploit-db.com/exploits/45147/ https://github.com/xairy/kernel-exploits/tree/master/CVE-2017-1000112 http://seclists.org/oss-sec/2017/q3/277 RedHat Security Advisories: RHSA-2017:2918 https://access.redhat.com/errata/RHSA-2017:2918 RedHat Security Advisories: RHSA-2017:2930 https://access.redhat.com/errata/RHSA-2017:2930 RedHat Security Advisories: RHSA-2017:2931 https://access.redhat.com/errata/RHSA-2017:2931 RedHat Security Advisories: RHSA-2017:3200 https://access.redhat.com/errata/RHSA-2017:3200 RedHat Security Advisories: RHSA-2019:1931 https://access.redhat.com/errata/RHSA-2019:1931 RedHat Security Advisories: RHSA-2019:1932 https://access.redhat.com/errata/RHSA-2019:1932 RedHat Security Advisories: RHSA-2019:4159 https://access.redhat.com/errata/RHSA-2019:4159 http://www.securitytracker.com/id/1039162 Common Vulnerability Exposure (CVE) ID: CVE-2017-10663 BugTraq ID: 100215 http://www.securityfocus.com/bid/100215
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.