ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2014.0007
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2014-0007)
Resumen:	The remote host is missing an update for the 'nodejs' package(s) announced via the MGASA-2014-0007 advisory.
Descripción:	Summary: The remote host is missing an update for the 'nodejs' package(s) announced via the MGASA-2014-0007 advisory. Vulnerability Insight: A denial of service flaw was found in the way Node.js handled pipelined HTTP requests. A remote attacker could use this flaw to send an excessive amount of HTTP requests over a network connection, causing Node.js to use an excessive amount of memory and possibly exit when all available memory is exhausted (CVE-2013-4450). Denial of service issues in the bundled v8 JavaScript library (CVE-2013-6639, CVE-2013-6640). Affected Software/OS: 'nodejs' package(s) on Mageia 3. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4450 BugTraq ID: 63229 http://www.securityfocus.com/bid/63229 https://github.com/rapid7/metasploit-framework/pull/2548 https://groups.google.com/forum/#!topic/nodejs/NEbweYB0ei0 http://www.openwall.com/lists/oss-security/2013/10/20/1 RedHat Security Advisories: RHSA-2013:1842 http://rhn.redhat.com/errata/RHSA-2013-1842.html SuSE Security Announcement: openSUSE-SU-2013:1863 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-12/msg00051.html Common Vulnerability Exposure (CVE) ID: CVE-2013-6639 Debian Security Information: DSA-2811 (Google Search) http://www.debian.org/security/2013/dsa-2811 http://www.securitytracker.com/id/1029442 http://secunia.com/advisories/56216 http://secunia.com/advisories/56217 SuSE Security Announcement: openSUSE-SU-2013:1927 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-12/msg00090.html SuSE Security Announcement: openSUSE-SU-2013:1933 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-12/msg00096.html SuSE Security Announcement: openSUSE-SU-2013:1960 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-12/msg00122.html SuSE Security Announcement: openSUSE-SU-2013:1962 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-12/msg00124.html SuSE Security Announcement: openSUSE-SU-2014:0065 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html SuSE Security Announcement: openSUSE-SU-2014:0092 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-01/msg00063.html Common Vulnerability Exposure (CVE) ID: CVE-2013-6640
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.