Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2018.0145
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2018-0145)
Zusammenfassung:	The remote host is missing an update for the 'cups-filters, libjpeg, qpdf' package(s) announced via the MGASA-2018-0145 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'cups-filters, libjpeg, qpdf' package(s) announced via the MGASA-2018-0145 advisory. Vulnerability Insight: Updated qpdf packages fix security vulnerabilities: 1. Stack overflow due to endless recursion in QPDFTokenizer::resolveLiteral() 2. Another stack overflow / endless recursion in QPDFWriter::enqueueObject() 3. Stack out of bounds read in iterate_rc4() 4. heap out of bounds read (large) in Pl_Buffer::write 5. Hang due to a pdf xref loop: Also, the libjpeg package has been patched to provide pkgconfig files, so that cups-filters could be rebuilt against this qpdf update. Affected Software/OS: 'cups-filters, libjpeg, qpdf' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-11624 http://somevulnsofadlab.blogspot.jp/2017/07/qpdfan-infinite-loop-in-libqpdf.html https://github.com/qpdf/qpdf/issues/117 https://usn.ubuntu.com/3638-1/ Common Vulnerability Exposure (CVE) ID: CVE-2017-11625 http://somevulnsofadlab.blogspot.jp/2017/07/qpdfan-infinite-loop-in-libqpdf_26.html https://github.com/qpdf/qpdf/issues/120 Common Vulnerability Exposure (CVE) ID: CVE-2017-11626 http://somevulnsofadlab.blogspot.jp/2017/07/qpdfan-infinite-loop-in-libqpdf_65.html https://github.com/qpdf/qpdf/issues/119 Common Vulnerability Exposure (CVE) ID: CVE-2017-11627 http://somevulnsofadlab.blogspot.jp/2017/07/qpdfan-infinite-loop-in-libqpdf_21.html https://github.com/qpdf/qpdf/issues/118 Common Vulnerability Exposure (CVE) ID: CVE-2017-12595 Common Vulnerability Exposure (CVE) ID: CVE-2017-9208 https://blogs.gentoo.org/ago/2017/05/21/qpdf-three-infinite-loop-in-libqpdf/ Common Vulnerability Exposure (CVE) ID: CVE-2017-9209 Common Vulnerability Exposure (CVE) ID: CVE-2017-9210
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.