ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2016.0239
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2016-0239)
Resumen:	The remote host is missing an update for the 'libarchive' package(s) announced via the MGASA-2016-0239 advisory.
Descripción:	Summary: The remote host is missing an update for the 'libarchive' package(s) announced via the MGASA-2016-0239 advisory. Vulnerability Insight: An out of bounds read in the rar parser: invalid read in function copy_from_lzss_window() when unpacking malformed rar (CVE-2015-8934). An exploitable heap overflow vulnerability exists in the 7zip read_SubStreamsInfo functionality of libarchive. A specially crafted 7zip file can cause a integer overflow resulting in memory corruption that can lead to code execution. An attacker can send a malformed file to trigger this vulnerability (CVE-2016-4300). An exploitable stack based buffer overflow vulnerability exists in the mtree parse_device functionality of libarchive. A specially crafted mtree file can cause a buffer overflow resulting in memory corruption/code execution. An attacker can send a malformed file to trigger this vulnerability (CVE-2016-4301). An exploitable heap overflow vulnerability exists in the Rar decompression functionality of libarchive. A specially crafted Rar file can cause a heap corruption eventually leading to code execution. An attacker can send a malformed file to trigger this vulnerability (CVE-2016-4302). A signed integer overflow in iso parser: integer overflow when computing location of volume descriptor (CVE-2016-5844). The libarchive package has been updated to version 3.2.1, fixing those issues and other bugs. Affected Software/OS: 'libarchive' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8934 BugTraq ID: 91409 http://www.securityfocus.com/bid/91409 Debian Security Information: DSA-3657 (Google Search) http://www.debian.org/security/2016/dsa-3657 https://security.gentoo.org/glsa/201701-03 https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html http://www.openwall.com/lists/oss-security/2016/06/17/2 http://www.openwall.com/lists/oss-security/2016/06/17/5 RedHat Security Advisories: RHSA-2016:1844 http://rhn.redhat.com/errata/RHSA-2016-1844.html SuSE Security Announcement: SUSE-SU-2016:1909 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html http://www.ubuntu.com/usn/USN-3033-1 Common Vulnerability Exposure (CVE) ID: CVE-2016-4300 BugTraq ID: 91326 http://www.securityfocus.com/bid/91326 http://blog.talosintel.com/2016/06/the-poisoned-archives.html http://www.talosintel.com/reports/TALOS-2016-0152/ Common Vulnerability Exposure (CVE) ID: CVE-2016-4301 BugTraq ID: 91328 http://www.securityfocus.com/bid/91328 http://www.talosintel.com/reports/TALOS-2016-0153/ Common Vulnerability Exposure (CVE) ID: CVE-2016-4302 BugTraq ID: 91331 http://www.securityfocus.com/bid/91331 http://www.talosintel.com/reports/TALOS-2016-0154/
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.