ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2020.0092
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2020-0092)
Resumen:	The remote host is missing an update for the 'webkit2' package(s) announced via the MGASA-2020-0092 advisory.
Descripción:	Summary: The remote host is missing an update for the 'webkit2' package(s) announced via the MGASA-2020-0092 advisory. Vulnerability Insight: webkit2 packages have been updated to 2.26.4 and fixed the following security vulnerabilities: A malicious website may be able to cause a denial of service (CVE-2020-3862). A DOM object context may not have had a unique security origin (CVE-2020-3864). A top-level DOM object context may have incorrectly been considered secure (CVE-2020-3865). Processing maliciously crafted web content may lead to universal cross site scripting (CVE-2020-3867). Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2020-3868). Affected Software/OS: 'webkit2' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2020-3862 https://security.gentoo.org/glsa/202003-22 https://support.apple.com/HT210947 https://support.apple.com/HT210948 SuSE Security Announcement: openSUSE-SU-2020:0278 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00004.html Common Vulnerability Exposure (CVE) ID: CVE-2020-3864 https://support.apple.com/en-us/HT210918 https://support.apple.com/en-us/HT210920 https://support.apple.com/en-us/HT210922 https://support.apple.com/en-us/HT210923 https://support.apple.com/en-us/HT210947 https://support.apple.com/en-us/HT210948 Common Vulnerability Exposure (CVE) ID: CVE-2020-3865 Common Vulnerability Exposure (CVE) ID: CVE-2020-3867 Common Vulnerability Exposure (CVE) ID: CVE-2020-3868 https://support.apple.com/HT210920
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.