Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2023.0286
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2023-0286)
Zusammenfassung:	The remote host is missing an update for the 'glibc' package(s) announced via the MGASA-2023-0286 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'glibc' package(s) announced via the MGASA-2023-0286 advisory. Vulnerability Insight: The updated packages fix a security vulnerability: A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges. (CVE-2023-4911) Affected Software/OS: 'glibc' package(s) on Mageia 8, Mageia 9. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2023-4911 RHBZ#2238352 https://bugzilla.redhat.com/show_bug.cgi?id=2238352 RHSA-2023:5453 https://access.redhat.com/errata/RHSA-2023:5453 RHSA-2023:5454 https://access.redhat.com/errata/RHSA-2023:5454 RHSA-2023:5455 https://access.redhat.com/errata/RHSA-2023:5455 RHSA-2023:5476 https://access.redhat.com/errata/RHSA-2023:5476 RHSA-2024:0033 https://access.redhat.com/errata/RHSA-2024:0033 http://packetstormsecurity.com/files/174986/glibc-ld.so-Local-Privilege-Escalation.html http://packetstormsecurity.com/files/176288/Glibc-Tunables-Privilege-Escalation.html http://seclists.org/fulldisclosure/2023/Oct/11 http://www.openwall.com/lists/oss-security/2023/10/03/2 http://www.openwall.com/lists/oss-security/2023/10/03/3 http://www.openwall.com/lists/oss-security/2023/10/05/1 http://www.openwall.com/lists/oss-security/2023/10/13/11 http://www.openwall.com/lists/oss-security/2023/10/14/3 http://www.openwall.com/lists/oss-security/2023/10/14/5 http://www.openwall.com/lists/oss-security/2023/10/14/6 https://access.redhat.com/security/cve/CVE-2023-4911 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/ https://security.gentoo.org/glsa/202310-03 https://security.netapp.com/advisory/ntap-20231013-0006/ https://www.debian.org/security/2023/dsa-5514 https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt https://www.qualys.com/cve-2023-4911/
Copyright	Copyright (C) 2023 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.