ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2017.0083
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2017-0083)
Resumen:	The remote host is missing an update for the 'tnef' package(s) announced via the MGASA-2017-0083 advisory.
Descripción:	Summary: The remote host is missing an update for the 'tnef' package(s) announced via the MGASA-2017-0083 advisory. Vulnerability Insight: An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapi_attr.c:mapi_attr_read(). These might lead to invalid read and write operations, controlled by an attacker. (CVE-2017-6307) An issue was discovered in tnef before 1.4.13. Several Integer Overflows, which can lead to Heap Overflows, have been identified in the functions that wrap memory allocation. (CVE-2017-6308) An issue was discovered in tnef before 1.4.13. Two type confusions have been identified in the parse_file() function. These might lead to invalid read and write operations, controlled by an attacker. (CVE-2017-6309) An issue was discovered in tnef before 1.4.13. Four type confusions have been identified in the file_add_mapi_attrs() function. These might lead to invalid read and write operations, controlled by an attacker. (CVE-2017-6310) Affected Software/OS: 'tnef' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-6307 BugTraq ID: 96427 http://www.securityfocus.com/bid/96427 Debian Security Information: DSA-3798 (Google Search) http://www.debian.org/security/2017/dsa-3798 https://security.gentoo.org/glsa/201708-02 https://github.com/verdammelt/tnef/blob/master/ChangeLog https://github.com/verdammelt/tnef/commit/1a17af1ed0c791aec44dbdc9eab91218cc1e335a https://www.x41-dsec.de/lab/advisories/x41-2017-004-tnef/ Common Vulnerability Exposure (CVE) ID: CVE-2017-6308 https://github.com/verdammelt/tnef/commit/c5044689e50039635e7700fe2472fd632ac77176 Common Vulnerability Exposure (CVE) ID: CVE-2017-6309 https://github.com/verdammelt/tnef/commit/8dccf79857ceeb7a6d3e42c1e762e7b865d5344d Common Vulnerability Exposure (CVE) ID: CVE-2017-6310
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.