Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2019.0137
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2019-0137)
Zusammenfassung:	The remote host is missing an update for the 'ming' package(s) announced via the MGASA-2019-0137 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'ming' package(s) announced via the MGASA-2019-0137 advisory. Vulnerability Insight: The printDefineFont2 function (util/listfdb.c) in libming through 0.4.8 is vulnerable to a heap-based buffer overflow, which may allow attackers to cause a denial of service or unspecified other impact via a crafted FDB file. (CVE-2018-6358) There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 during a RegisterNumber sprintf. A Crafted input will lead to a denial of service attack. (CVE-2018-7867) There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial of service attack. (CVE-2018-7868) An invalid memory address dereference was discovered in getString in util/decompile.c in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. (CVE-2018-7870) There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT16 data. A crafted input will lead to a denial of service or possibly unspecified other impact. (CVE-2018-7871) An invalid memory address dereference was discovered in the function getName in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. (CVE-2018-7872) There is a heap-based buffer over-read in the getString function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial of service attack. (CVE-2018-7875) The pushdup function in util/decompile.c in libming through 0.4.8 does not recognize the need for ActionPushDuplicate to perform a deep copy when a String is at the top of the stack, making the library vulnerable to a util/decompile.c getName NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted SWF file. (CVE-2018-9165) Affected Software/OS: 'ming' package(s) on Mageia 6. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2018-6358 https://security.gentoo.org/glsa/201904-24 https://lists.debian.org/debian-lts-announce/2018/04/msg00008.html Common Vulnerability Exposure (CVE) ID: CVE-2018-7867 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260 https://github.com/libming/libming/issues/116 Common Vulnerability Exposure (CVE) ID: CVE-2018-7868 https://github.com/libming/libming/issues/113 Common Vulnerability Exposure (CVE) ID: CVE-2018-7870 https://github.com/libming/libming/issues/117 Common Vulnerability Exposure (CVE) ID: CVE-2018-7871 https://github.com/libming/libming/issues/120 Common Vulnerability Exposure (CVE) ID: CVE-2018-7872 https://github.com/libming/libming/issues/114 Common Vulnerability Exposure (CVE) ID: CVE-2018-7875 https://github.com/libming/libming/issues/112 Common Vulnerability Exposure (CVE) ID: CVE-2018-9165
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.