ID de Prueba:	1.3.6.1.4.1.25623.1.0.881958
Categoría:	CentOS Local Security Checks
Título:	CentOS Update for lzo CESA-2014:0861 centos6
Resumen:	The remote host is missing an update for the 'lzo'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'lzo' package(s) announced via the referenced advisory. Vulnerability Insight: LZO is a portable lossless data compression library written in ANSI C. An integer overflow flaw was found in the way the lzo library decompressed certain archives compressed with the LZO algorithm. An attacker could create a specially crafted LZO-compressed input that, when decompressed by an application using the lzo library, would cause that application to crash or, potentially, execute arbitrary code. (CVE-2014-4607) Red Hat would like to thank Don A. Bailey from Lab Mouse Security for reporting this issue. All lzo users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. For the update to take effect, all services linked to the lzo library must be restarted or the system rebooted. Affected Software/OS: lzo on CentOS 6 Solution: Please install the updated packages. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-4607 http://blog.securitymouse.com/2014/06/raising-lazarus-20-year-old-bug-that.html
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.