Test Kennung:	1.3.6.1.4.1.25623.1.1.2.2019.1392
Kategorie:	Huawei EulerOS Local Security Checks
Titel:	Huawei EulerOS: Security Advisory for libsoup (EulerOS-SA-2019-1392)
Zusammenfassung:	The remote host is missing an update for the Huawei EulerOS 'libsoup' package(s) announced via the EulerOS-SA-2019-1392 advisory.
Beschreibung:	Summary: The remote host is missing an update for the Huawei EulerOS 'libsoup' package(s) announced via the EulerOS-SA-2019-1392 advisory. Vulnerability Insight: The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.(CVE-2018-12910) A stack-based buffer overflow flaw was discovered within the HTTP processing of libsoup. A remote attacker could exploit this flaw to cause a crash or, potentially, execute arbitrary code by sending a specially crafted HTTP request to a server using the libsoup HTTP server functionality or by tricking a user into connecting to a malicious HTTP server with an application using the libsoup HTTP client functionality.(CVE-2017-2885) Affected Software/OS: 'libsoup' package(s) on Huawei EulerOS Virtualization for ARM 64 3.0.1.0. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-2885 BugTraq ID: 100258 http://www.securityfocus.com/bid/100258 Debian Security Information: DSA-3929 (Google Search) https://www.debian.org/security/2017/dsa-3929 http://seclists.org/fulldisclosure/2020/Dec/3 http://packetstormsecurity.com/files/160388/ProCaster-LE-32F430-GStreamer-souphttpsrc-libsoup-2.51.3-Stack-Overflow.html https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0392 RedHat Security Advisories: RHSA-2017:2459 https://access.redhat.com/errata/RHSA-2017:2459
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.