ID de Prueba:	1.3.6.1.4.1.25623.1.0.120040
Categoría:	Amazon Linux Local Security Checks
Título:	Amazon Linux: Security Advisory (ALAS-2015-557)
Resumen:	The remote host is missing an update for the 'tcpdump' package(s) announced via the ALAS-2015-557 advisory.
Descripción:	Summary: The remote host is missing an update for the 'tcpdump' package(s) announced via the ALAS-2015-557 advisory. Vulnerability Insight: Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value. (CVE-2015-0261) The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) length, (2) offset, or (3) base pointer checksum value. (CVE-2015-2154) Affected Software/OS: 'tcpdump' package(s) on Amazon Linux. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-0261 BugTraq ID: 73019 http://www.securityfocus.com/bid/73019 Bugtraq: 20150309 tcpdump 4.7.2 remote crashes (Google Search) http://www.securityfocus.com/archive/1/534829/100/0/threaded Debian Security Information: DSA-3193 (Google Search) http://www.debian.org/security/2015/dsa-3193 http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153999.html http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153834.html https://security.gentoo.org/glsa/201510-04 http://www.mandriva.com/security/advisories?name=MDVSA-2015:125 http://www.mandriva.com/security/advisories?name=MDVSA-2015:182 http://packetstormsecurity.com/files/130730/tcpdump-Denial-Of-Service-Code-Execution.html RedHat Security Advisories: RHSA-2017:1871 https://access.redhat.com/errata/RHSA-2017:1871 http://www.securitytracker.com/id/1031937 SuSE Security Announcement: openSUSE-SU-2015:0616 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-03/msg00084.html http://www.ubuntu.com/usn/USN-2580-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-2154 BugTraq ID: 73017 http://www.securityfocus.com/bid/73017
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.