Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2022.0103
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2022-0103)
Zusammenfassung:	The remote host is missing an update for the 'nodejs-tar' package(s) announced via the MGASA-2022-0103 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'nodejs-tar' package(s) announced via the MGASA-2022-0103 advisory. Vulnerability Insight: Untrusted tar file to symlink into an arbitrary location allowing file overwrites. (CVE-2021-37712) Arbitrary file creation/overwrite and arbitrary code execution. (CVE-2021-37701) Arbitrary File Creation/Overwrite vulnerability via insufficient symlink protection. (CVE-2021-32803) Arbitrary File Creation/Overwrite vulnerability due to insufficient absolute path sanitization (CVE-2021-32804) Affected Software/OS: 'nodejs-tar' package(s) on Mageia 8. Solution: Please install the updated package(s). CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2021-32803 https://github.com/npm/node-tar/security/advisories/GHSA-r628-mhmh-qjhw https://github.com/npm/node-tar/commit/9dbdeb6df8e9dbd96fa9e84341b9d74734be6c20 https://www.npmjs.com/advisories/1771 https://www.npmjs.com/package/tar https://www.oracle.com/security-alerts/cpuoct2021.html Common Vulnerability Exposure (CVE) ID: CVE-2021-32804 https://github.com/npm/node-tar/security/advisories/GHSA-3jfq-g458-7qm9 https://github.com/npm/node-tar/commit/1f036ca23f64a547bdd6c79c1a44bc62e8115da4 https://www.npmjs.com/advisories/1770 Common Vulnerability Exposure (CVE) ID: CVE-2021-37701 https://github.com/npm/node-tar/security/advisories/GHSA-9r2w-394v-53qc Debian Security Information: DSA-5008 (Google Search) https://www.debian.org/security/2021/dsa-5008 https://lists.debian.org/debian-lts-announce/2022/12/msg00023.html Common Vulnerability Exposure (CVE) ID: CVE-2021-37712 https://github.com/npm/node-tar/security/advisories/GHSA-qq89-hq3f-393p
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.