Test Kennung:	1.3.6.1.4.1.25623.1.0.120040
Kategorie:	Amazon Linux Local Security Checks
Titel:	Amazon Linux: Security Advisory (ALAS-2015-557)
Zusammenfassung:	The remote host is missing an update for the 'tcpdump' package(s) announced via the ALAS-2015-557 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'tcpdump' package(s) announced via the ALAS-2015-557 advisory. Vulnerability Insight: Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value. (CVE-2015-0261) The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) length, (2) offset, or (3) base pointer checksum value. (CVE-2015-2154) Affected Software/OS: 'tcpdump' package(s) on Amazon Linux. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-0261 BugTraq ID: 73019 http://www.securityfocus.com/bid/73019 Bugtraq: 20150309 tcpdump 4.7.2 remote crashes (Google Search) http://www.securityfocus.com/archive/1/534829/100/0/threaded Debian Security Information: DSA-3193 (Google Search) http://www.debian.org/security/2015/dsa-3193 http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153999.html http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153834.html https://security.gentoo.org/glsa/201510-04 http://www.mandriva.com/security/advisories?name=MDVSA-2015:125 http://www.mandriva.com/security/advisories?name=MDVSA-2015:182 http://packetstormsecurity.com/files/130730/tcpdump-Denial-Of-Service-Code-Execution.html RedHat Security Advisories: RHSA-2017:1871 https://access.redhat.com/errata/RHSA-2017:1871 http://www.securitytracker.com/id/1031937 SuSE Security Announcement: openSUSE-SU-2015:0616 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-03/msg00084.html http://www.ubuntu.com/usn/USN-2580-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-2154 BugTraq ID: 73017 http://www.securityfocus.com/bid/73017
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.