ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2024.0059
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2024-0059)
Resumen:	The remote host is missing an update for the 'libgit2' package(s) announced via the MGASA-2024-0059 advisory.
Descripción:	Summary: The remote host is missing an update for the 'libgit2' package(s) announced via the MGASA-2024-0059 advisory. Vulnerability Insight: When using an SSH remote with the optional libssh2 backend, libgit2 does not perform certificate checking by default. (CVE-2023-22742) Using well-crafted inputs to `git_index_add` can cause heap corruption that could be leveraged for arbitrary code execution. (CVE-2024-24577) Affected Software/OS: 'libgit2' package(s) on Mageia 9. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2023-22742 https://github.com/libgit2/libgit2/commit/42e5db98b963ae503229c63e44e06e439df50e56 https://github.com/libgit2/libgit2/commit/cd6f679af401eda1f172402006ef8265f8bd58ea https://github.com/libgit2/libgit2/releases/tag/v1.4.5 https://github.com/libgit2/libgit2/releases/tag/v1.5.1 https://github.com/libgit2/libgit2/security/advisories/GHSA-8643-3wh5-rmjq https://www.libssh2.org http://www.openwall.com/lists/oss-security/2023/11/06/5 Common Vulnerability Exposure (CVE) ID: CVE-2024-24577 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S635BGHHZUMRPI7QOXOJ45QHDD5FFZ3S/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z6MXOX7I43OWNN7R6M54XLG6U5RXY244/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7CNDW3PF6NHO7OXNM5GN6WSSGAMA7MZE/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZGNHOEE2RBLH7KCJUPUNYG4CDTW4HTBT/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4M3P7WIEPXNRLBINQRJFXUSTNKBCHYC7/ https://github.com/libgit2/libgit2/releases/tag/v1.6.5 https://github.com/libgit2/libgit2/releases/tag/v1.7.2 https://github.com/libgit2/libgit2/security/advisories/GHSA-j2v7-4f6v-gpg8 https://lists.debian.org/debian-lts-announce/2024/02/msg00012.html
Copyright	Copyright (C) 2024 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.