Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2020.0441
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2020-0441)
Zusammenfassung:	The remote host is missing an update for the 'webkit2' package(s) announced via the MGASA-2020-0441 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'webkit2' package(s) announced via the MGASA-2020-0441 advisory. Vulnerability Insight: The webkit2 package has been updated to version 2.30.3, fixing several security issues and other bugs. A type confusion issue may lead to arbitrary code execution with a maliciously crafted web content, fixed with improved memory handling (CVE-2020-9948). An use after free issue may lead to arbitrary code execution with a maliciously crafted web content, fixed with improved memory management (CVE-2020-9951). An out-of-bounds write issue may lead to code execution with a maliciously crafted web content, fixed with improved bounds checking (CVE-2020-9983). An use after free issue may lead to arbitrary code execution with a maliciously crafted web content, fixed with improved memory management (CVE-2020-13543). An use after free issue may lead to arbitrary code execution with a maliciously crafted web content, fixed with improved memory management. (CVE-2020-13584). Affected Software/OS: 'webkit2' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2020-13543 https://security.gentoo.org/glsa/202012-10 https://talosintelligence.com/vulnerability_reports/TALOS-2020-1155 https://www.oracle.com/security-alerts/cpuapr2022.html Common Vulnerability Exposure (CVE) ID: CVE-2020-13584 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BY2OBQZFMEFZOSWXPXHPEHOJXXILEEX2/ https://talosintelligence.com/vulnerability_reports/TALOS-2020-1195 Common Vulnerability Exposure (CVE) ID: CVE-2020-9948 Debian Security Information: DSA-4797 (Google Search) https://www.debian.org/security/2020/dsa-4797 http://seclists.org/fulldisclosure/2020/Nov/18 https://support.apple.com/HT211845 http://www.openwall.com/lists/oss-security/2020/11/23/3 Common Vulnerability Exposure (CVE) ID: CVE-2020-9951 http://seclists.org/fulldisclosure/2020/Nov/20 http://seclists.org/fulldisclosure/2020/Nov/19 http://seclists.org/fulldisclosure/2020/Nov/22 Common Vulnerability Exposure (CVE) ID: CVE-2020-9983 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PDGBNKYT7NMW7CJ26YFUPUHPJVYGV7IQ/
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.