Test ID:	1.3.6.1.4.1.25623.1.1.10.2021.0509
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2021-0509)
Summary:	The remote host is missing an update for the 'openafs' package(s) announced via the MGASA-2021-0509 advisory.
Description:	Summary: The remote host is missing an update for the 'openafs' package(s) announced via the MGASA-2021-0509 advisory. Vulnerability Insight: Openafs packages have been updated to 1.9.1 for various bugfixes, and added a fix for security vulnerability: There exist in the wild AFS3 clients that improperly construct access control lists which are then stored to directories via RXAFS_StoreACL (opcode 134). These clients add negative access control entries (if any) to the normal rights list. As there is no method by which a fileserver can determine that the ACL is improperly constructed, the only method to defend the storage of broken ACLs is to identify clients that are known to properly construct ACLs by introducing a new RXAFS_StoreACL opcode (164) (CVE-2018-7168). Additionally the CellServDB has been updated to latest version and fixes for suppoorting kernel 5.14 and 5.15 series have been added. Affected Software/OS: 'openafs' package(s) on Mageia 8. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-7168
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.