Test Kennung:	1.3.6.1.4.1.25623.1.0.120485
Kategorie:	Amazon Linux Local Security Checks
Titel:	Amazon Linux: Security Advisory (ALAS-2012-125)
Zusammenfassung:	The remote host is missing an update for the 'openjpeg' package(s) announced via the ALAS-2012-125 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'openjpeg' package(s) announced via the ALAS-2012-125 advisory. Vulnerability Insight: It was found that OpenJPEG failed to sanity-check an image header field before using it. A remote attacker could provide a specially-crafted image file that could cause an application linked against OpenJPEG to crash or, possibly, execute arbitrary code. (CVE-2012-3535) Affected Software/OS: 'openjpeg' package(s) on Amazon Linux. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-3535 50360 http://secunia.com/advisories/50360 50681 http://secunia.com/advisories/50681 55214 http://www.securityfocus.com/bid/55214 84978 http://osvdb.org/84978 FEDORA-2012-14664 http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090021.html FEDORA-2012-14707 http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090579.html MDVSA-2012:157 http://www.mandriva.com/security/advisories?name=MDVSA-2012:157 RHSA-2012:1283 http://rhn.redhat.com/errata/RHSA-2012-1283.html [oss-security] 20120827 CVE Request: Heap-based buffer overflow in openjpeg http://www.openwall.com/lists/oss-security/2012/08/27/2 [oss-security] 20120827 Re: CVE Request: Heap-based buffer overflow in openjpeg http://www.openwall.com/lists/oss-security/2012/08/27/3 http://code.google.com/p/openjpeg/issues/detail?id=170 https://bugzilla.redhat.com/show_bug.cgi?id=842918 openjpeg-files-bo(77994) https://exchange.xforce.ibmcloud.com/vulnerabilities/77994
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.