Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2020.0350
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2020-0350)
Zusammenfassung:	The remote host is missing an update for the 'x11-server' package(s) announced via the MGASA-2020-0350 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'x11-server' package(s) announced via the MGASA-2020-0350 advisory. Vulnerability Insight: The handler for the XkbSetNames request does not validate the request length before accessing its contents (CVE-2020-14345). An integer underflow exists in the handler for the XIChangeHierarchy request (CVE-2020-14346). An integer underflow exist in the handler for the XkbSelectEvents request (CVE-2020-14361). An integer underflow exist in the handler for the CreateRegister request of the X record extension (CVE-2020-14362). The x11-server package has been updated to version 1.20.9, fixing these issues and other bugs. Affected Software/OS: 'x11-server' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2020-14345 https://security.gentoo.org/glsa/202012-01 https://www.zerodayinitiative.com/advisories/ZDI-20-1416/ https://bugzilla.redhat.com/show_bug.cgi?id=1862241 https://lists.x.org/archives/xorg-announce/2020-August/003058.html http://www.openwall.com/lists/oss-security/2021/01/15/1 https://usn.ubuntu.com/4488-2/ https://usn.ubuntu.com/4490-1/ Common Vulnerability Exposure (CVE) ID: CVE-2020-14346 https://bugzilla.redhat.com/show_bug.cgi?id=1862246 https://www.zerodayinitiative.com/advisories/ZDI-20-1417/ Common Vulnerability Exposure (CVE) ID: CVE-2020-14361 https://bugzilla.redhat.com/show_bug.cgi?id=1869142 https://www.zerodayinitiative.com/advisories/ZDI-20-1418/ Common Vulnerability Exposure (CVE) ID: CVE-2020-14362 https://bugzilla.redhat.com/show_bug.cgi?id=1869144 https://www.zerodayinitiative.com/advisories/ZDI-20-1419/
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.