Búsqueda de    
Vulnerabilidad   
    Buscar 219043 Descripciones CVE y
99761 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.1.2.2021.1662
Categoría:Huawei EulerOS Local Security Checks
Título:Huawei EulerOS: Security Advisory for libX11 (EulerOS-SA-2021-1662)
Resumen:The remote host is missing an update for the Huawei EulerOS 'libX11' package(s) announced via the EulerOS-SA-2021-1662 advisory.
Descripción:Summary:
The remote host is missing an update for the Huawei EulerOS 'libX11' package(s) announced via the EulerOS-SA-2021-1662 advisory.

Vulnerability Insight:
An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged attacker to cause an application compiled with libX11 to crash, or in some cases, result in arbitrary code execution. The highest threat from this flaw is to confidentiality, integrity as well as system availability.(CVE-2020-14363)



An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in libX11 before version 1.6.10. As per upstream this is security relevant when setuid programs call XIM client functions while running with elevated privileges. No such programs are shipped with Red Hat Enterprise Linux.(CVE-2020-14344)

Affected Software/OS:
'libX11' package(s) on Huawei EulerOS Virtualization release 2.9.0.

Solution:
Please install the updated package(s).

CVSS Score:
4.6

CVSS Vector:
AV:L/AC:L/Au:N/C:P/I:P/A:P

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2020-14344
Common Vulnerability Exposure (CVE) ID: CVE-2020-14363
CopyrightCopyright (C) 2021 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2024 E-Soft Inc. Todos los derechos reservados.