ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2019.0402
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2019-0402)
Resumen:	The remote host is missing an update for the 'libssh' package(s) announced via the MGASA-2019-0402 advisory.
Descripción:	Summary: The remote host is missing an update for the 'libssh' package(s) announced via the MGASA-2019-0402 advisory. Vulnerability Insight: Updated libssh packages fix security vulnerability: In an environment where a user is only allowed to copy files and not to execute applications, it would be possible to pass a location which contains commands to be executed in addition (CVE-2019-14889). Affected Software/OS: 'libssh' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2019-14889 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14889 https://www.libssh.org/security/advisories/CVE-2019-14889.txt https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EV2ONSPDJCTDVORCB4UGRQUZQQ46JHRN/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7JJWJTXVWLLJTVHBPGWL7472S5FWXYQR/ https://security.gentoo.org/glsa/202003-27 https://www.oracle.com/security-alerts/cpuapr2020.html https://lists.debian.org/debian-lts-announce/2019/12/msg00020.html https://lists.debian.org/debian-lts-announce/2023/05/msg00029.html SuSE Security Announcement: openSUSE-SU-2019:2689 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00033.html SuSE Security Announcement: openSUSE-SU-2020:0102 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00047.html https://usn.ubuntu.com/4219-1/
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.