Test ID:	1.3.6.1.4.1.25623.1.1.1.2.2016.411
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DLA-411-1)
Summary:	The remote host is missing an update for the Debian 'eglibc' package(s) announced via the DLA-411-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'eglibc' package(s) announced via the DLA-411-1 advisory. Vulnerability Insight: Several vulnerabilities have been fixed in the Debian GNU C Library, eglibc: CVE-2014-9761 The math's nan* function wrongly handled payload strings, yielding to an unbounded stack allocation based on the length of the arguments. To solve this issue, payload parsing has been refactored out of strtod into a separate functions that nan* can call directly. CVE-2015-8776 The strftime() function made it possible to access invalid memory, allowing to segfault the calling application. CVE-2015-8778 hcreate() was susceptible to an integer overflow, that may results in out-of-bounds heap accesses. CVE-2015-8779 The catopen() function suffered from multiple unbounded stack allocations. For Debian 6 Squeeze, these issues have been fixed in eglibc version eglibc_2.11.3-4+deb6u9. We recommend you to upgrade your eglibc packages. Affected Software/OS: 'eglibc' package(s) on Debian 6. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-9761 BugTraq ID: 83306 http://www.securityfocus.com/bid/83306 Bugtraq: 20190613 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series (Google Search) https://seclists.org/bugtraq/2019/Jun/14 Bugtraq: 20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X (Google Search) https://seclists.org/bugtraq/2019/Sep/7 http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html http://seclists.org/fulldisclosure/2019/Jun/18 http://seclists.org/fulldisclosure/2019/Sep/7 https://security.gentoo.org/glsa/201702-11 http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html https://www.sourceware.org/ml/libc-alpha/2016-02/msg00502.html http://www.openwall.com/lists/oss-security/2016/01/19/11 http://www.openwall.com/lists/oss-security/2016/01/20/1 RedHat Security Advisories: RHSA-2017:0680 http://rhn.redhat.com/errata/RHSA-2017-0680.html RedHat Security Advisories: RHSA-2017:1916 https://access.redhat.com/errata/RHSA-2017:1916 SuSE Security Announcement: SUSE-SU-2016:0470 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html SuSE Security Announcement: SUSE-SU-2016:0471 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html SuSE Security Announcement: SUSE-SU-2016:0472 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html SuSE Security Announcement: SUSE-SU-2016:0473 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html SuSE Security Announcement: openSUSE-SU-2016:0510 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html http://www.ubuntu.com/usn/USN-2985-1 http://www.ubuntu.com/usn/USN-2985-2 Common Vulnerability Exposure (CVE) ID: CVE-2015-8776 BugTraq ID: 83277 http://www.securityfocus.com/bid/83277 Debian Security Information: DSA-3480 (Google Search) http://www.debian.org/security/2016/dsa-3480 Debian Security Information: DSA-3481 (Google Search) http://www.debian.org/security/2016/dsa-3481 https://security.gentoo.org/glsa/201602-02 Common Vulnerability Exposure (CVE) ID: CVE-2015-8778 BugTraq ID: 83275 http://www.securityfocus.com/bid/83275 Common Vulnerability Exposure (CVE) ID: CVE-2015-8779 BugTraq ID: 82244 http://www.securityfocus.com/bid/82244
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.