Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2020.0418
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2020-0418)
Zusammenfassung:	The remote host is missing an update for the 'java-1.8.0-openjdk, timezone' package(s) announced via the MGASA-2020-0418 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'java-1.8.0-openjdk, timezone' package(s) announced via the MGASA-2020-0418 advisory. Vulnerability Insight: High memory usage during deserialization of Proxy class with many interfaces. (CVE-2020-14779) Credentials sent over unencrypted LDAP connection. (CVE-2020-14781) Certificate blacklist bypass via alternate certificate encodings. (CVE-2020-14782) Integer overflow leading to out-of-bounds access. (CVE-2020-14792) Missing permission check in path to URI conversion. (CVE-2020-14796) Incomplete check for invalid characters in URI to path conversion. (CVE-2020-14797) Race condition in NIO Buffer boundary checks. (CVE-2020-14803) Also, the timezone package has been updated to version 2020d. Affected Software/OS: 'java-1.8.0-openjdk, timezone' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2020-14779 Debian Security Information: DSA-4779 (Google Search) https://www.debian.org/security/2020/dsa-4779 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YCKZAI4AWSKO5O5VDXHFFKNLOZGZ3KEE/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMJMTXFJRONFT72YAEQNRFKYZZU4W3HD/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z7XEONOP6JB7SD7AMUWZTLZF2L4QD546/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XVPLGNHNJ4UJ6IO6R2XXEKCTCI2DRPDQ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N6CJCO52DHIQJHLPF6HMTC5Z2VKFRQMY/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XKRGVMZT3EUUWKUA6DBT56FT3UOKPHQ2/ https://security.gentoo.org/glsa/202101-19 https://www.oracle.com/security-alerts/cpuoct2020.html https://lists.debian.org/debian-lts-announce/2020/10/msg00031.html SuSE Security Announcement: openSUSE-SU-2020:1893 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00041.html Common Vulnerability Exposure (CVE) ID: CVE-2020-14781 Common Vulnerability Exposure (CVE) ID: CVE-2020-14782 Common Vulnerability Exposure (CVE) ID: CVE-2020-14792 Common Vulnerability Exposure (CVE) ID: CVE-2020-14796 Common Vulnerability Exposure (CVE) ID: CVE-2020-14797 Common Vulnerability Exposure (CVE) ID: CVE-2020-14803 https://security.netapp.com/advisory/ntap-20201023-0004/ https://www.oracle.com/security-alerts/cpujan2021.html
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.