ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2024.0112
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2024-0112)
Resumen:	The remote host is missing an update for the 'util-linux' package(s) announced via the MGASA-2024-0112 advisory.
Descripción:	Summary: The remote host is missing an update for the 'util-linux' package(s) announced via the MGASA-2024-0112 advisory. Vulnerability Insight: wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover. (CVE-2024-28085) Affected Software/OS: 'util-linux' package(s) on Mageia 9. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2024-28085 https://github.com/skyler-ferrante/CVE-2024-28085 https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/ https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt https://www.openwall.com/lists/oss-security/2024/03/27/5 https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html http://www.openwall.com/lists/oss-security/2024/03/27/5 http://www.openwall.com/lists/oss-security/2024/03/27/6 http://www.openwall.com/lists/oss-security/2024/03/27/7 http://www.openwall.com/lists/oss-security/2024/03/27/8 http://www.openwall.com/lists/oss-security/2024/03/27/9 http://www.openwall.com/lists/oss-security/2024/03/28/1 http://www.openwall.com/lists/oss-security/2024/03/28/3 http://www.openwall.com/lists/oss-security/2024/03/28/2
Copyright	Copyright (C) 2024 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.