Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2019.0408
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2019-0408)
Zusammenfassung:	The remote host is missing an update for the 'ruby' package(s) announced via the MGASA-2019-0408 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'ruby' package(s) announced via the MGASA-2019-0408 advisory. Vulnerability Insight: Updated ruby packages fix security vulnerabilities: It was discovered that Ruby incorrectly handled certain files. An attacker could possibly use this issue to pass path matching what can lead to an unauthorized access (CVE-2019-15845). It was discovered that Ruby incorrectly handled certain regular expressions. An attacker could use this issue to cause a denial of service (CVE-2019-16201). It was discovered that Ruby incorrectly handled certain HTTP headers. An attacker could possibly use this issue to execute arbitrary code (CVE-2019-16254). It was discovered that Ruby incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code (CVE-2019-16255). Affected Software/OS: 'ruby' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2019-15845 Bugtraq: 20191217 [SECURITY] [DSA 4586-1] ruby2.5 security update (Google Search) https://seclists.org/bugtraq/2019/Dec/32 Bugtraq: 20191217 [SECURITY] [DSA 4587-1] ruby2.3 security update (Google Search) https://seclists.org/bugtraq/2019/Dec/31 Debian Security Information: DSA-4587 (Google Search) https://www.debian.org/security/2019/dsa-4587 https://security.gentoo.org/glsa/202003-06 https://hackerone.com/reports/449617 https://www.oracle.com/security-alerts/cpujan2020.html https://lists.debian.org/debian-lts-announce/2019/11/msg00025.html SuSE Security Announcement: openSUSE-SU-2020:0395 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html https://usn.ubuntu.com/4201-1/ Common Vulnerability Exposure (CVE) ID: CVE-2019-16201 https://hackerone.com/reports/661722 https://lists.debian.org/debian-lts-announce/2019/12/msg00009.html https://lists.debian.org/debian-lts-announce/2020/08/msg00027.html https://lists.debian.org/debian-lts-announce/2023/04/msg00033.html Common Vulnerability Exposure (CVE) ID: CVE-2019-16254 Debian Security Information: DSA-4586 (Google Search) https://www.debian.org/security/2019/dsa-4586 https://hackerone.com/reports/331984 Common Vulnerability Exposure (CVE) ID: CVE-2019-16255 https://hackerone.com/reports/327512
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.