Test ID:	1.3.6.1.4.1.25623.1.1.10.2018.0036
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2018-0036)
Summary:	The remote host is missing an update for the 'connman' package(s) announced via the MGASA-2018-0036 advisory.
Description:	Summary: The remote host is missing an update for the 'connman' package(s) announced via the MGASA-2018-0036 advisory. Vulnerability Insight: Security consultants in NRI Secure Technologies discovered a stack overflow vulnerability in ConnMan. An attacker with control of the DNS responses to the DNS proxy in ConnMan might crash the service and, in same cases, remotely execute arbitrary commands in the host running the service (CVE-2017-12865) Affected Software/OS: 'connman' package(s) on Mageia 5, Mageia 6. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-12865 BugTraq ID: 100498 http://www.securityfocus.com/bid/100498 Debian Security Information: DSA-3956 (Google Search) http://www.debian.org/security/2017/dsa-3956 https://security.gentoo.org/glsa/201812-02 https://www.nri-secure.com/blog/new-iot-vulnerability-connmando
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.