Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
145615 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.1.10.2018.0286
Categoría:Mageia Linux Local Security Checks
Título:Mageia: Security Advisory (MGASA-2018-0286)
Resumen:The remote host is missing an update for the 'flash-player-plugin' package(s) announced via the MGASA-2018-0286 advisory.
Descripción:Summary:
The remote host is missing an update for the 'flash-player-plugin' package(s) announced via the MGASA-2018-0286 advisory.

Vulnerability Insight:
Updated flash-player-plugin packages fixes the following security issues

A remote attacker could possibly execute arbitrary code with the privileges
of the process or obtain sensitive information (CVE-2018-4945,
CVE-2018-5000, CVE-2018-5001, CVE-2018-5002).

In response to a class of recently disclosed vulnerabilities in popular
CPU hardware related to data cache timing (CVE-2017-5753, CVE-2017-5715,
CVE-2017-5754), known popularly as Spectre and Meltdown, Adobe are
disabling the 'shareable' property of the ActionScript ByteArray class
by default. For more info see the referenced adobe release notes.

Affected Software/OS:
'flash-player-plugin' package(s) on Mageia 6.

Solution:
Please install the updated package(s).

CVSS Score:
10.0

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2018-4945
BugTraq ID: 104413
http://www.securityfocus.com/bid/104413
https://security.gentoo.org/glsa/201806-02
https://helpx.adobe.com/security/products/flash-player/apsb18-19.html
RedHat Security Advisories: RHSA-2018:1827
https://access.redhat.com/errata/RHSA-2018:1827
http://www.securitytracker.com/id/1041058
Common Vulnerability Exposure (CVE) ID: CVE-2018-5000
Common Vulnerability Exposure (CVE) ID: CVE-2018-5001
Common Vulnerability Exposure (CVE) ID: CVE-2018-5002
BugTraq ID: 104412
http://www.securityfocus.com/bid/104412
CopyrightCopyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.