ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2017.0086
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2017-0086)
Resumen:	The remote host is missing an update for the 'libwmf' package(s) announced via the MGASA-2017-0086 advisory.
Descripción:	Summary: The remote host is missing an update for the 'libwmf' package(s) announced via the MGASA-2017-0086 advisory. Vulnerability Insight: The gdImageCreate function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (system hang) via an oversized image. (CVE-2016-9317) The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted image file. (CVE-2016-10167) Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image. (CVE-2016-10168) Affected Software/OS: 'libwmf' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 7.1 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-10167 BugTraq ID: 95869 http://www.securityfocus.com/bid/95869 Debian Security Information: DSA-3777 (Google Search) http://www.debian.org/security/2017/dsa-3777 http://www.openwall.com/lists/oss-security/2017/01/26/1 http://www.openwall.com/lists/oss-security/2017/01/28/6 RedHat Security Advisories: RHSA-2017:3221 https://access.redhat.com/errata/RHSA-2017:3221 RedHat Security Advisories: RHSA-2018:1296 https://access.redhat.com/errata/RHSA-2018:1296 http://www.securitytracker.com/id/1037659 Common Vulnerability Exposure (CVE) ID: CVE-2016-10168 Common Vulnerability Exposure (CVE) ID: CVE-2016-9317 BugTraq ID: 95841 http://www.securityfocus.com/bid/95841
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.