Test ID:	1.3.6.1.4.1.25623.1.1.10.2016.0193
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2016-0193)
Summary:	The remote host is missing an update for the 'expat' package(s) announced via the MGASA-2016-0193 advisory.
Description:	Summary: The remote host is missing an update for the 'expat' package(s) announced via the MGASA-2016-0193 advisory. Vulnerability Insight: Gustavo Grieco discovered that Expat does not properly handle certain kinds of malformed input documents, resulting in buffer overflows during processing and error reporting. A remote attacker can take advantage of this flaw to cause an application using the Expat library to crash, or potentially, to execute arbitrary code with the privileges of the user running the application (CVE-2016-0718). Affected Software/OS: 'expat' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-0718 1036348 http://www.securitytracker.com/id/1036348 1036415 http://www.securitytracker.com/id/1036415 1037705 http://www.securitytracker.com/id/1037705 20170227 CVE-2016-9892 - Remote Code Execution as Root via ESET Endpoint Antivirus 6 http://seclists.org/fulldisclosure/2017/Feb/68 90729 http://www.securityfocus.com/bid/90729 APPLE-SA-2016-07-18-1 http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html DSA-3582 http://www.debian.org/security/2016/dsa-3582 GLSA-201701-21 https://security.gentoo.org/glsa/201701-21 RHSA-2016:2824 http://rhn.redhat.com/errata/RHSA-2016-2824.html RHSA-2018:2486 https://access.redhat.com/errata/RHSA-2018:2486 SUSE-SU-2016:1508 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.html SUSE-SU-2016:1512 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.html USN-2983-1 http://www.ubuntu.com/usn/USN-2983-1 USN-3044-1 http://www.ubuntu.com/usn/USN-3044-1 [oss-security] 20160517 CVE-2016-0718: Expat XML Parser Crashes on Malformed Input http://www.openwall.com/lists/oss-security/2016/05/17/12 http://packetstormsecurity.com/files/141350/ESET-Endpoint-Antivirus-6-Remote-Code-Execution.html http://support.eset.com/ca6333/ http://www.mozilla.org/security/announce/2016/mfsa2016-68.html http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html https://bugzilla.mozilla.org/show_bug.cgi?id=1236923 https://bugzilla.redhat.com/show_bug.cgi?id=1296102 https://kc.mcafee.com/corporate/index?page=content&id=SB10365 https://source.android.com/security/bulletin/2016-11-01.html https://support.apple.com/HT206903 https://www.tenable.com/security/tns-2016-20 openSUSE-SU-2016:1441 http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.html openSUSE-SU-2016:1523 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.html openSUSE-SU-2016:1964 http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html openSUSE-SU-2016:2026 http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.