ID de Prueba:	1.3.6.1.4.1.25623.1.0.882418
Categoría:	CentOS Local Security Checks
Título:	CentOS Update for xerces-c CESA-2016:0430 centos7
Resumen:	Check the version of xerces-c
Descripción:	Summary: Check the version of xerces-c Vulnerability Insight: Xerces-C is a validating XML parser written in a portable subset of C++. It was discovered that the Xerces-C XML parser did not properly process certain XML input. By providing specially crafted XML data to an application using Xerces-C for XML processing, a remote attacker could exploit this flaw to cause an application crash or, possibly, execute arbitrary code with the privileges of the application. (CVE-2016-0729) Red Hat would like to thank Gustavo Grieco for reporting this issue. All xerces-c users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the update, all applications using Xerces-C must be restarted for the update to take effect. Affected Software/OS: xerces-c on CentOS 7 Solution: Please Install the Updated Packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-0729 BugTraq ID: 83423 http://www.securityfocus.com/bid/83423 Bugtraq: 20160225 CVE-2016-0729: Apache Xerces-C XML Parser Crashes on Malformed Input (Google Search) http://www.securityfocus.com/archive/1/537620/100/0/threaded Debian Security Information: DSA-3493 (Google Search) http://www.debian.org/security/2016/dsa-3493 http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182597.html http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182062.html http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182131.html https://security.gentoo.org/glsa/201612-46 http://packetstormsecurity.com/files/135949/Apache-Xerces-C-XML-Parser-Buffer-Overflow.html https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html http://www.securitytracker.com/id/1035113 SuSE Security Announcement: openSUSE-SU-2016:0966 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-04/msg00012.html SuSE Security Announcement: openSUSE-SU-2016:1121 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-04/msg00086.html SuSE Security Announcement: openSUSE-SU-2016:1808 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-07/msg00053.html
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.