Test ID:	1.3.6.1.4.1.25623.1.1.12.2023.6434.1
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-6434-1)
Summary:	The remote host is missing an update for the 'pmix' package(s) announced via the USN-6434-1 advisory.
Description:	Summary: The remote host is missing an update for the 'pmix' package(s) announced via the USN-6434-1 advisory. Vulnerability Insight: Francois Diakhate discovered that PMIx did not properly handle race conditions in the pmix library, which could lead to unwanted privilege escalation. An attacker could possibly use this issue to obtain ownership of an arbitrary file on the filesystem, under the default configuration of the application. Affected Software/OS: 'pmix' package(s) on Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04. Solution: Please install the updated package(s). CVSS Score: 7.6 CVSS Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-41915 Debian Security Information: DSA-5547 (Google Search) https://www.debian.org/security/2023/dsa-5547 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IFKIY6SNC3KQNZMVROWMIW6DI5XPNKQX/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YDLWSMQYXF2ZGOQKCG26H6ZZA5FEH7HX/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SYJ7IRNR6NHJMTNOV3E3W3D5MLDRDCJX/ https://docs.openpmix.org/en/latest/security.html https://lists.debian.org/debian-lts-announce/2023/10/msg00048.html
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.