ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2019.0020
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2019-0020)
Resumen:	The remote host is missing an update for the 'discount' package(s) announced via the MGASA-2019-0020 advisory.
Descripción:	Summary: The remote host is missing an update for the 'discount' package(s) announced via the MGASA-2019-0020 advisory. Vulnerability Insight: The __mkd_trim_line function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file (CVE-2018-11468). DISCOUNT through version 2.2.3a is vulnerable to a Heap-based buffer-overflow in the markdown.c:isfootnote() function. An attacker could exploit this to cause a denial of service (CVE-2018-11503). DISCOUNT through version 2.2.3a is vulnerable to a Heap-based buffer-overflow in the markdown.c:islist() function. An attacker could exploit this to cause a denial of service (CVE-2018-11504). The quoteblock function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file (CVE-2018-12495). Affected Software/OS: 'discount' package(s) on Mageia 6. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2018-11468 Debian Security Information: DSA-4293 (Google Search) https://www.debian.org/security/2018/dsa-4293 https://github.com/Orc/discount/issues/189 https://lists.debian.org/debian-lts-announce/2018/09/msg00009.html Common Vulnerability Exposure (CVE) ID: CVE-2018-11503 https://github.com/Orc/discount/issues/189#issuecomment-392247798 Common Vulnerability Exposure (CVE) ID: CVE-2018-11504 Common Vulnerability Exposure (CVE) ID: CVE-2018-12495 https://github.com/Orc/discount/issues/189#issuecomment-397541501
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.