ID de Prueba:	1.3.6.1.4.1.25623.1.0.871778
Categoría:	Red Hat Local Security Checks
Título:	RedHat Update for coreutils RHSA-2017:0654-01
Resumen:	The remote host is missing an update for the 'coreutils'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'coreutils' package(s) announced via the referenced advisory. Vulnerability Insight: The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Security Fix(es): * A race condition was found in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions. (CVE-2017-2616) Red Hat would like to thank Tobias Stockmann for reporting this issue. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 6.9 Release Notes and Red Hat Enterprise Linux 6.9 Technical Notes linked from the References section. Affected Software/OS: coreutils on Red Hat Enterprise Linux Desktop (v. 6), Red Hat Enterprise Linux Server (v. 6), Red Hat Enterprise Linux Workstation (v. 6) Solution: Please Install the Updated Packages. CVSS Score: 4.7 CVSS Vector: AV:L/AC:M/Au:N/C:N/I:N/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-2616 BugTraq ID: 96404 http://www.securityfocus.com/bid/96404 Debian Security Information: DSA-3793 (Google Search) https://www.debian.org/security/2017/dsa-3793 https://security.gentoo.org/glsa/201706-02 RedHat Security Advisories: RHSA-2017:0654 http://rhn.redhat.com/errata/RHSA-2017-0654.html RedHat Security Advisories: RHSA-2017:0907 https://access.redhat.com/errata/RHSA-2017:0907 http://www.securitytracker.com/id/1038271
Copyright	Copyright (C) 2017 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.