ID de Prueba:	1.3.6.1.4.1.25623.1.0.871879
Categoría:	Red Hat Local Security Checks
Título:	RedHat Update for libsoup RHSA-2017:2459-01
Resumen:	The remote host is missing an update for the 'libsoup'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'libsoup' package(s) announced via the referenced advisory. Vulnerability Insight: The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * A stack-based buffer overflow flaw was discovered within the HTTP processing of libsoup. A remote attacker could exploit this flaw to cause a crash or, potentially, execute arbitrary code by sending a specially crafted HTTP request to a server using the libsoup HTTP server functionality or by tricking a user into connecting to a malicious HTTP server with an application using the libsoup HTTP client functionality. (CVE-2017-2885) Red Hat would like to thank Aleksandar Nikolic (Cisco Talos) for reporting this issue. Affected Software/OS: libsoup on Red Hat Enterprise Linux Server (v. 7) Solution: Please Install the Updated Packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-2885 BugTraq ID: 100258 http://www.securityfocus.com/bid/100258 Debian Security Information: DSA-3929 (Google Search) https://www.debian.org/security/2017/dsa-3929 http://seclists.org/fulldisclosure/2020/Dec/3 http://packetstormsecurity.com/files/160388/ProCaster-LE-32F430-GStreamer-souphttpsrc-libsoup-2.51.3-Stack-Overflow.html https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0392 RedHat Security Advisories: RHSA-2017:2459 https://access.redhat.com/errata/RHSA-2017:2459
Copyright	Copyright (C) 2017 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.