ID de Prueba:	1.3.6.1.4.1.25623.1.0.70247
Categoría:	FreeBSD Local Security Checks
Título:	FreeBSD Ports: libsndfile
Resumen:	The remote host is missing an update to the system; as announced in the referenced advisory.
Descripción:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: libsndfile CVE-2011-2696 Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PARIS Audio Format (PAF) file that triggers a heap-based buffer overflow. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2696 45125 http://secunia.com/advisories/45125 45351 http://secunia.com/advisories/45351 45384 http://secunia.com/advisories/45384 45388 http://secunia.com/advisories/45388 45433 http://secunia.com/advisories/45433 48644 http://www.securityfocus.com/bid/48644 DSA-2288 http://www.debian.org/security/2011/dsa-2288 FEDORA-2011-9325 http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062955.html MDVSA-2011:119 http://www.mandriva.com/security/advisories?name=MDVSA-2011:119 RHSA-2011:1084 http://www.redhat.com/support/errata/RHSA-2011-1084.html USN-1174-1 http://www.ubuntu.com/usn/USN-1174-1 [oss-security] 20110714 CVE Request -- libsndfile -- Integer overflow by processing certain PAF files http://www.openwall.com/lists/oss-security/2011/07/14/1 [oss-security] 20110714 Re: CVE Request -- libsndfile -- Integer overflow by processing certain PAF files http://www.openwall.com/lists/oss-security/2011/07/14/2 http://www.openwall.com/lists/oss-security/2011/07/14/3 [oss-security] 20110714 Re: Re: CVE Request -- libsndfile -- Integer overflow by processing certain PAF files http://www.openwall.com/lists/oss-security/2011/07/14/4 [oss-security] 20110715 Re: CVE Request -- libsndfile -- Integer overflow by processing certain PAF files http://www.openwall.com/lists/oss-security/2011/07/15/1 [oss-security] 20110715 Re: Re: CVE Request -- libsndfile -- Integer overflow by processing certain PAF files http://www.openwall.com/lists/oss-security/2011/07/15/3 http://www.openwall.com/lists/oss-security/2011/07/15/4 [oss-security] 20110718 Re: CVE Request -- libsndfile -- Integer overflow by processing certain PAF files http://www.openwall.com/lists/oss-security/2011/07/18/1 http://www.mega-nerd.com/libsndfile/ChangeLog http://www.securelist.com/en/advisories/45125 https://bugs.gentoo.org/show_bug.cgi?id=375125 https://bugzilla.redhat.com/show_bug.cgi?id=721234 openSUSE-SU-2011:0855 https://hermes.opensuse.org/messages/10387521
Copyright	Copyright (C) 2011 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.