Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2018.0267
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2018-0267)
Zusammenfassung:	The remote host is missing an update for the 'git' package(s) announced via the MGASA-2018-0267 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'git' package(s) announced via the MGASA-2018-0267 advisory. Vulnerability Insight: It was possible to trick the code that sanity-checks paths on NTFS into reading random piece of memory (CVE-2018-11233). Submodule 'names' come from the untrusted .gitmodules file, but we blindly append them to $GIT_DIR/modules to create our on-disk repo paths. This means you can do bad things by putting '../' into the name. We now enforce some rules for submodule names which will cause Git to ignore these malicious names (CVE-2018-11235). Affected Software/OS: 'git' package(s) on Mageia 6. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2018-11233 BugTraq ID: 104346 http://www.securityfocus.com/bid/104346 https://security.gentoo.org/glsa/201805-13 https://marc.info/?l=git&m=152761328506724&w=2 RedHat Security Advisories: RHSA-2018:2147 https://access.redhat.com/errata/RHSA-2018:2147 http://www.securitytracker.com/id/1040991 SuSE Security Announcement: openSUSE-SU-2020:0598 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html https://usn.ubuntu.com/3671-1/ Common Vulnerability Exposure (CVE) ID: CVE-2018-11235 BugTraq ID: 104345 http://www.securityfocus.com/bid/104345 Debian Security Information: DSA-4212 (Google Search) https://www.debian.org/security/2018/dsa-4212 https://www.exploit-db.com/exploits/44822/ https://blogs.msdn.microsoft.com/devops/2018/05/29/announcing-the-may-2018-git-security-vulnerability/ RedHat Security Advisories: RHSA-2018:1957 https://access.redhat.com/errata/RHSA-2018:1957
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.