Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 146377 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.120571
Kategorie:Amazon Linux Local Security Checks
Titel:Amazon Linux: Security Advisory (ALAS-2014-271)
Zusammenfassung:The remote host is missing an update for the 'openjpeg' package(s) announced via the ALAS-2014-271 advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'openjpeg' package(s) announced via the ALAS-2014-271 advisory.

Vulnerability Insight:
Multiple heap-based buffer overflow flaws were found in OpenJPEG. An attacker could create a specially crafted OpenJPEG image that, when opened, could cause an application using openjpeg to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2013-6045, CVE-2013-6054)

Multiple denial of service flaws were found in OpenJPEG. An attacker could create a specially crafted OpenJPEG image that, when opened, could cause an application using openjpeg to crash (CVE-2013-1447, CVE-2013-6052)

Affected Software/OS:
'openjpeg' package(s) on Amazon Linux.

Solution:
Please install the updated package(s).

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2013-1447
BugTraq ID: 64142
http://www.securityfocus.com/bid/64142
Debian Security Information: DSA-2808 (Google Search)
http://www.debian.org/security/2013/dsa-2808
http://seclists.org/oss-sec/2013/q4/412
RedHat Security Advisories: RHSA-2013:1850
http://rhn.redhat.com/errata/RHSA-2013-1850.html
Common Vulnerability Exposure (CVE) ID: CVE-2013-6045
BugTraq ID: 64109
http://www.securityfocus.com/bid/64109
http://osvdb.org/100636
http://osvdb.org/100637
http://osvdb.org/100638
http://osvdb.org/100641
http://osvdb.org/100646
Common Vulnerability Exposure (CVE) ID: CVE-2013-6052
Common Vulnerability Exposure (CVE) ID: CVE-2013-6054
BugTraq ID: 64113
http://www.securityfocus.com/bid/64113
http://osvdb.org/100639
CopyrightCopyright (C) 2015 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.