ID de Prueba:	1.3.6.1.4.1.25623.1.0.882514
Categoría:	CentOS Local Security Checks
Título:	CentOS Update for ocaml CESA-2016:1296 centos7
Resumen:	Check the version of ocaml
Descripción:	Summary: Check the version of ocaml Vulnerability Insight: OCaml is a high-level, strongly-typed, functional, and object-oriented programming language from the ML family of languages. The ocaml packages contain two batch compilers (a fast bytecode compiler and an optimizing native-code compiler), an interactive top level system, parsing tools (Lex, Yacc, Camlp4), a replay debugger, a documentation generator, and a comprehensive library. Security Fix(es): * OCaml versions 4.02.3 and earlier have a runtime bug that, on 64-bit platforms, causes size arguments to internal memmove calls to be sign-extended from 32- to 64-bits before being passed to the memmove function. This leads to arguments between 2GiB and 4GiB being interpreted as larger than they are (specifically, a bit below 2^64), causing a buffer overflow. Further, arguments between 4GiB and 6GiB are interpreted as 4GiB smaller than they should be, causing a possible information leak. (CVE-2015-8869) Affected Software/OS: ocaml on CentOS 7 Solution: Please Install the Updated Packages. CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8869 BugTraq ID: 89318 http://www.securityfocus.com/bid/89318 http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184507.html https://security.gentoo.org/glsa/201702-15 http://www.openwall.com/lists/oss-security/2016/04/29/6 http://www.openwall.com/lists/oss-security/2016/04/29/1 RedHat Security Advisories: RHSA-2016:1296 https://access.redhat.com/errata/RHSA-2016:1296 RedHat Security Advisories: RHSA-2016:2576 http://rhn.redhat.com/errata/RHSA-2016-2576.html RedHat Security Advisories: RHSA-2017:0564 http://rhn.redhat.com/errata/RHSA-2017-0564.html RedHat Security Advisories: RHSA-2017:0565 http://rhn.redhat.com/errata/RHSA-2017-0565.html SuSE Security Announcement: openSUSE-SU-2016:1335 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-05/msg00081.html SuSE Security Announcement: openSUSE-SU-2016:2273 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-09/msg00037.html
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.