ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2019.0022
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2019-0022)
Resumen:	The remote host is missing an update for the 'coreutils' package(s) announced via the MGASA-2019-0022 advisory.
Descripción:	Summary: The remote host is missing an update for the 'coreutils' package(s) announced via the MGASA-2019-0022 advisory. Vulnerability Insight: A flaw was found in GNU Coreutils through 8.29 in chown-core.c. The functions chown and chgrp do not prevent replacement of a plain file with a symlink during use of the POSIX '-R -L' options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition (CVE-2017-18018). A flaw was found in Gnulib before 2018-09-23. The convert_to_decimal function in vasnprintf.c has a heap-based buffer overflow because memory is not allocated for a trailing '\0' character during %f processing (CVE-2018-17942). Affected Software/OS: 'coreutils' package(s) on Mageia 6. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-18018 http://lists.gnu.org/archive/html/coreutils/2017-12/msg00045.html Common Vulnerability Exposure (CVE) ID: CVE-2018-17942 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TMGHTVYH3KAFN34QXNSGEQDSTV7MCOQW/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A5UQRNQE6XHMD5UYYHAU3VQWAYHIPMQS/ https://github.com/coreutils/gnulib/commit/278b4175c9d7dd47c1a3071554aac02add3b3c35 https://lists.gnu.org/archive/html/bug-gnulib/2018-09/msg00107.html https://savannah.gnu.org/bugs/?func=detailitem&item_id=54686
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.