Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2019.0022
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2019-0022)
Zusammenfassung:	The remote host is missing an update for the 'coreutils' package(s) announced via the MGASA-2019-0022 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'coreutils' package(s) announced via the MGASA-2019-0022 advisory. Vulnerability Insight: A flaw was found in GNU Coreutils through 8.29 in chown-core.c. The functions chown and chgrp do not prevent replacement of a plain file with a symlink during use of the POSIX '-R -L' options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition (CVE-2017-18018). A flaw was found in Gnulib before 2018-09-23. The convert_to_decimal function in vasnprintf.c has a heap-based buffer overflow because memory is not allocated for a trailing '\0' character during %f processing (CVE-2018-17942). Affected Software/OS: 'coreutils' package(s) on Mageia 6. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-18018 http://lists.gnu.org/archive/html/coreutils/2017-12/msg00045.html Common Vulnerability Exposure (CVE) ID: CVE-2018-17942 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TMGHTVYH3KAFN34QXNSGEQDSTV7MCOQW/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A5UQRNQE6XHMD5UYYHAU3VQWAYHIPMQS/ https://github.com/coreutils/gnulib/commit/278b4175c9d7dd47c1a3071554aac02add3b3c35 https://lists.gnu.org/archive/html/bug-gnulib/2018-09/msg00107.html https://savannah.gnu.org/bugs/?func=detailitem&item_id=54686
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.