Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
145615 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.871817
Categoría:Red Hat Local Security Checks
Título:RedHat Update for kdelibs RHSA-2017:1264-01
Resumen:The remote host is missing an update for the 'kdelibs'; package(s) announced via the referenced advisory.
Descripción:Summary:
The remote host is missing an update for the 'kdelibs'
package(s) announced via the referenced advisory.

Vulnerability Insight:
The K Desktop Environment (KDE) is a
graphical desktop environment for the X Window System. The kdelibs packages include
core libraries for the K Desktop Environment.

Security Fix(es):

* A privilege escalation flaw was found in the way kdelibs handled D-Bus
messages. A local user could potentially use this flaw to gain root
privileges by spoofing a callerID and leveraging a privileged helper
application. (CVE-2017-8422)

Red Hat would like to thank Sebastian Krahmer (SUSE) for reporting this
issue.

Affected Software/OS:
kdelibs on
Red Hat Enterprise Linux Server (v. 7)

Solution:
Please Install the Updated Packages.

CVSS Score:
7.2

CVSS Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:C

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2017-8422
BugTraq ID: 98412
http://www.securityfocus.com/bid/98412
Debian Security Information: DSA-3849 (Google Search)
http://www.debian.org/security/2017/dsa-3849
https://www.exploit-db.com/exploits/42053/
https://security.gentoo.org/glsa/201706-29
http://www.openwall.com/lists/oss-security/2017/05/10/3
RedHat Security Advisories: RHSA-2017:1264
https://access.redhat.com/errata/RHSA-2017:1264
http://www.securitytracker.com/id/1038480
CopyrightCopyright (C) 2017 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.