Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
145615 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.882772
Categoría:CentOS Local Security Checks
Título:CentOS Update for augeas CESA-2017:2788 centos7
Resumen:Check the version of augeas
Descripción:Summary:
Check the version of augeas

Vulnerability Insight:
Augeas is a configuration editing tool.
It parses configuration files in their native formats and transforms them into
a tree. Configuration changes are made by manipulating this tree and saving it
back into native config files.

Security Fix(es):

* A vulnerability was discovered in augeas affecting the handling of
escaped strings. An attacker could send crafted strings that would cause
the application using augeas to copy past the end of a buffer, leading to a
crash or possible code execution. (CVE-2017-7555)

This issue was discovered by Han Han (Red Hat).

Affected Software/OS:
augeas on CentOS 7

Solution:
Please Install the Updated Packages.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2017-7555
BugTraq ID: 100378
http://www.securityfocus.com/bid/100378
Debian Security Information: DSA-3949 (Google Search)
http://www.debian.org/security/2017/dsa-3949
https://github.com/hercules-team/augeas/pull/480
RedHat Security Advisories: RHSA-2017:2788
https://access.redhat.com/errata/RHSA-2017:2788
RedHat Security Advisories: RHSA-2019:2403
https://access.redhat.com/errata/RHSA-2019:2403
CopyrightCopyright (C) 2017 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.