Test ID:	1.3.6.1.4.1.25623.1.1.10.2014.0174
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2014-0174)
Summary:	The remote host is missing an update for the 'jbigkit' package(s) announced via the MGASA-2014-0174 advisory.
Description:	Summary: The remote host is missing an update for the 'jbigkit' package(s) announced via the MGASA-2014-0174 advisory. Vulnerability Insight: Updated jbigkit packages fix security vulnerability: Florian Weimer found a stack-based buffer overflow flaw in the libjbig library (part of jbigkit). A specially-crafted image file read by libjbig could be used to cause a program linked to libjbig to crash or, potentially, to execute arbitrary code (CVE-2013-6369). The jbigkit package has been updated to version 2.1, which fixes this issue, as well as a few other bugs, including the ability of corrupted input data to force the jbig85 decoder into an end-less loop. Affected Software/OS: 'jbigkit' package(s) on Mageia 3, Mageia 4. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-6369 57731 http://secunia.com/advisories/57731 66697 http://www.securityfocus.com/bid/66697 https://bugzilla.redhat.com/show_bug.cgi?id=1032273 https://www.cl.cam.ac.uk/~mgk25/jbigkit/CHANGES
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.