Test ID:	1.3.6.1.4.1.25623.1.0.871778
Category:	Red Hat Local Security Checks
Title:	RedHat Update for coreutils RHSA-2017:0654-01
Summary:	The remote host is missing an update for the 'coreutils'; package(s) announced via the referenced advisory.
Description:	Summary: The remote host is missing an update for the 'coreutils' package(s) announced via the referenced advisory. Vulnerability Insight: The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Security Fix(es): * A race condition was found in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions. (CVE-2017-2616) Red Hat would like to thank Tobias Stockmann for reporting this issue. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 6.9 Release Notes and Red Hat Enterprise Linux 6.9 Technical Notes linked from the References section. Affected Software/OS: coreutils on Red Hat Enterprise Linux Desktop (v. 6), Red Hat Enterprise Linux Server (v. 6), Red Hat Enterprise Linux Workstation (v. 6) Solution: Please Install the Updated Packages. CVSS Score: 4.7 CVSS Vector: AV:L/AC:M/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-2616 BugTraq ID: 96404 http://www.securityfocus.com/bid/96404 Debian Security Information: DSA-3793 (Google Search) https://www.debian.org/security/2017/dsa-3793 https://security.gentoo.org/glsa/201706-02 RedHat Security Advisories: RHSA-2017:0654 http://rhn.redhat.com/errata/RHSA-2017-0654.html RedHat Security Advisories: RHSA-2017:0907 https://access.redhat.com/errata/RHSA-2017:0907 http://www.securitytracker.com/id/1038271
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.