Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2018.0214
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2018-0214)
Zusammenfassung:	The remote host is missing an update for the 'libofx' package(s) announced via the MGASA-2018-0214 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'libofx' package(s) announced via the MGASA-2018-0214 advisory. Vulnerability Insight: An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability (CVE-2017-2816). An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability (CVE-2017-2920). ofx_proc_file in ofx_preproc.cpp in LibOFX 0.9.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file, as demonstrated by an ofxdump call (CVE-2017-14731). Affected Software/OS: 'libofx' package(s) on Mageia 6. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-14731 https://security.gentoo.org/glsa/201908-26 https://github.com/libofx/libofx/issues/10 https://lists.debian.org/debian-lts-announce/2017/11/msg00038.html Common Vulnerability Exposure (CVE) ID: CVE-2017-2816 BugTraq ID: 100828 http://www.securityfocus.com/bid/100828 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0317 Common Vulnerability Exposure (CVE) ID: CVE-2017-2920 BugTraq ID: 101186 http://www.securityfocus.com/bid/101186 https://github.com/libofx/libofx/commit/a70934eea95c76a7737b83773bffe8738935082d https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0427
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.