Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2017.0464
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2017-0464)
Zusammenfassung:	The remote host is missing an update for the 'glibc, libtirpc' package(s) announced via the MGASA-2017-0464 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'glibc, libtirpc' package(s) announced via the MGASA-2017-0464 advisory. Vulnerability Insight: The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will solicit large UDP responses from name servers, potentially simplifying off-path DNS spoofing attacks due to IP fragmentation.(CVE-2017-12132, CVE-2017-12133). The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow (CVE-2017-15670). The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could skip freeing allocated memory when processing the ~ operator with a long user name, potentially leading to a denial of service (memory leak) (CVE-2017-15671). The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~ operator (CVE-2017-15804). As libtirpc is also affected by CVE-2017-12133, it's part of this update. Affected Software/OS: 'glibc, libtirpc' package(s) on Mageia 6. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-12132 BugTraq ID: 100598 http://www.securityfocus.com/bid/100598 https://arxiv.org/pdf/1205.4011.pdf https://sourceware.org/bugzilla/show_bug.cgi?id=21361 RedHat Security Advisories: RHSA-2018:0805 https://access.redhat.com/errata/RHSA-2018:0805 Common Vulnerability Exposure (CVE) ID: CVE-2017-12133 BugTraq ID: 100679 https://www.securityfocus.com/bid/100679 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SYZL6PAKI73XYRJYL5VLDGA4FFGWMB7A/ https://usn.ubuntu.com/4416-1/ Common Vulnerability Exposure (CVE) ID: CVE-2017-15670 BugTraq ID: 101521 http://www.securityfocus.com/bid/101521 RedHat Security Advisories: RHSA-2018:1879 https://access.redhat.com/errata/RHSA-2018:1879 Common Vulnerability Exposure (CVE) ID: CVE-2017-15671 BugTraq ID: 101517 http://www.securityfocus.com/bid/101517 Common Vulnerability Exposure (CVE) ID: CVE-2017-15804 BugTraq ID: 101535 http://www.securityfocus.com/bid/101535
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.