ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2014.0177
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2014-0177)
Resumen:	The remote host is missing an update for the 'elfutils' package(s) announced via the MGASA-2014-0177 advisory.
Descripción:	Summary: The remote host is missing an update for the 'elfutils' package(s) announced via the MGASA-2014-0177 advisory. Vulnerability Insight: Updated elfutils packages fix security vulnerability: The libdw library provides support for accessing DWARF debugging information inside ELF files. An integer overflow flaw in check_section(), leading to a heap-based buffer overflow, was found in the libdw library. A malicious ELF file could cause an application using libdw (such as eu-readelf) to crash or, potentially, execute arbitrary code with the privileges of the user running the application (CVE-2014-0172). Affected Software/OS: 'elfutils' package(s) on Mageia 3, Mageia 4. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-0172 BugTraq ID: 66714 http://www.securityfocus.com/bid/66714 https://security.gentoo.org/glsa/201612-32 https://lists.fedorahosted.org/pipermail/elfutils-devel/2014-April/003921.html http://seclists.org/oss-sec/2014/q2/54 http://www.ubuntu.com/usn/USN-2188-1
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.