Test ID:	1.3.6.1.4.1.25623.1.1.10.2014.0346
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2014-0346)
Summary:	The remote host is missing an update for the 'sdcc' package(s) announced via the MGASA-2014-0346 advisory.
Description:	Summary: The remote host is missing an update for the 'sdcc' package(s) announced via the MGASA-2014-0346 advisory. Vulnerability Insight: Integer overflow, leading to heap-buffer overflow by processing certain file headers via bfd binary. (CVE-2012-3509) A nonfree package is also now available, which provides components that cannot be included in the core repository. In addition, this update obsoletes sdcc2.9, which is old and probably has the same security vulnerability. Affected Software/OS: 'sdcc' package(s) on Mageia 3, Mageia 4. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-3509 55281 http://www.securityfocus.com/bid/55281 MDVSA-2015:029 http://www.mandriva.com/security/advisories?name=MDVSA-2015:029 USN-2496-1 http://www.ubuntu.com/usn/USN-2496-1 [gcc-patches] 20120829 [PATCH] PR other/54411: libiberty: objalloc_alloc integer overflows (CVE-2012-3509) http://gcc.gnu.org/ml/gcc-patches/2012-08/msg01986.html [oss-security] 20120829 CVE-2012-3509: objalloc_alloc integer overflows in libiberty http://www.openwall.com/lists/oss-security/2012/08/29/3 gnu-libiberty-overflow(78135) https://exchange.xforce.ibmcloud.com/vulnerabilities/78135 http://gcc.gnu.org/bugzilla/show_bug.cgi?id=54411 http://security-tracker.debian.org/tracker/CVE-2012-3509
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.