Test Kennung:	1.3.6.1.4.1.25623.1.0.120085
Kategorie:	Amazon Linux Local Security Checks
Titel:	Amazon Linux: Security Advisory (ALAS-2014-416)
Zusammenfassung:	The remote host is missing an update for the 'json-c' package(s) announced via the ALAS-2014-416 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'json-c' package(s) announced via the ALAS-2014-416 advisory. Vulnerability Insight: The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions. Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a denial of service via unspecified vectors. Affected Software/OS: 'json-c' package(s) on Amazon Linux. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2013-6370 57791 http://secunia.com/advisories/57791 66720 http://www.securityfocus.com/bid/66720 FEDORA-2014-5006 http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131845.html MDVSA-2014:079 http://www.mandriva.com/security/advisories?name=MDVSA-2014:079 http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html https://bugzilla.redhat.com/show_bug.cgi?id=1032322 https://github.com/json-c/json-c/commit/64e36901a0614bf64a19bc3396469c66dcd0b015 jsonc-cve20136370-bo(92540) https://exchange.xforce.ibmcloud.com/vulnerabilities/92540 Common Vulnerability Exposure (CVE) ID: CVE-2013-6371 66715 http://www.securityfocus.com/bid/66715 https://bugzilla.redhat.com/show_bug.cgi?id=1032311 jsonc-cve20136371-dos(92541) https://exchange.xforce.ibmcloud.com/vulnerabilities/92541
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.