Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2021.0032
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2021-0032)
Zusammenfassung:	The remote host is missing an update for the 'policycoreutils' package(s) announced via the MGASA-2021-0032 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'policycoreutils' package(s) announced via the MGASA-2021-0032 advisory. Vulnerability Insight: Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restrictions. This only happens when the relabeling process is done, usually when taking SELinux state from disabled to enable (permissive or enforcing) (CVE-2018-1063). Affected Software/OS: 'policycoreutils' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 3.3 CVSS Vector: AV:L/AC:M/Au:N/C:P/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2018-1063 RHSA-2018:0913 https://access.redhat.com/errata/RHSA-2018:0913 https://bugzilla.redhat.com/show_bug.cgi?id=1550122
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.