ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2021.0325
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2021-0325)
Resumen:	The remote host is missing an update for the 'libosinfo' package(s) announced via the MGASA-2021-0325 advisory.
Descripción:	Summary: The remote host is missing an update for the 'libosinfo' package(s) announced via the MGASA-2021-0325 advisory. Vulnerability Insight: Updated libosinfo packages fix security vulnerability: A flaw was found in libosinfo, version 1.5.0, where the script for automated guest installations, 'osinfo-install-script', accepts user and admin passwords via command line arguments. This could allow guest passwords to leak to other system users via a process listing (CVE-2019-13313). The libosinfo package has been updated to version 1.8.0, fixing this issue and other bugs. Affected Software/OS: 'libosinfo' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2019-13313 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AZU4IPPIR73NYC6E733QR26O5ZI6MMKJ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EEZUZKC6YK4E3NXM7XKZOXY5X5PJSPIR/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT44EYZZQFTK7XM6GKCYC4WUE7HYZVXM/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G4AD73NGYBV7GYT4LFC3TC7AYBWOJTG4/ https://gitlab.com/libosinfo/libosinfo/-/tags https://gitlab.com/libosinfo/libosinfo/blob/master/NEWS https://libosinfo.org/download/ https://www.redhat.com/archives/libosinfo/2019-July/msg00026.html http://www.openwall.com/lists/oss-security/2019/07/08/3 RedHat Security Advisories: RHSA-2019:3387 https://access.redhat.com/errata/RHSA-2019:3387
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.