ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2017.0094
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2017-0094)
Resumen:	The remote host is missing an update for the 'mbedtls' package(s) announced via the MGASA-2017-0094 advisory.
Descripción:	Summary: The remote host is missing an update for the 'mbedtls' package(s) announced via the MGASA-2017-0094 advisory. Vulnerability Insight: In mbedTLS before 1.3.19, if a malicious peer supplies a certificate with a specially crafted secp224k1 public key, then an attacker can cause the server or client to attempt to free block of memory held on stack. Depending on the platform, this could result in a Denial of Service (client crash) or potentially could be exploited to allow remote code execution with the same privileges as the host application (CVE-2017-2784). The mbedtls package has been updated to version 1.3.19, fixing this issue as well as other security issues and bugs. Affected Software/OS: 'mbedtls' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-2784 https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2017-01 https://security.gentoo.org/glsa/201706-18 http://www.talosintelligence.com/reports/TALOS-2017-0274/
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.