Test Kennung:	1.3.6.1.4.1.25623.1.0.120587
Kategorie:	Amazon Linux Local Security Checks
Titel:	Amazon Linux: Security Advisory (ALAS-2012-61)
Zusammenfassung:	The remote host is missing an update for the 'rpm' package(s) announced via the ALAS-2012-61 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'rpm' package(s) announced via the ALAS-2012-61 advisory. Vulnerability Insight: Multiple flaws were found in the way RPM parsed package file headers. An attacker could create a specially-crafted RPM package that, when its package header was accessed, or during package signature verification, could cause an application using the RPM library (such as the rpm command line tool, or the yum and up2date package managers) to crash or, potentially, execute arbitrary code. (CVE-2012-0060, CVE-2012-0061, CVE-2012-0815) Affected Software/OS: 'rpm' package(s) on Amazon Linux. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0060 BugTraq ID: 52865 http://www.securityfocus.com/bid/52865 http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077960.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078819.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078907.html http://www.mandriva.com/security/advisories?name=MDVSA-2012:056 https://bugzilla.redhat.com/show_bug.cgi?id=744858 http://www.osvdb.org/81010 RedHat Security Advisories: RHSA-2012:0451 http://rhn.redhat.com/errata/RHSA-2012-0451.html RedHat Security Advisories: RHSA-2012:0531 http://rhn.redhat.com/errata/RHSA-2012-0531.html http://www.securitytracker.com/id?1026882 http://secunia.com/advisories/48651 http://secunia.com/advisories/48716 http://secunia.com/advisories/49110 SuSE Security Announcement: openSUSE-SU-2012:0588 (Google Search) https://hermes.opensuse.org/messages/14440932 SuSE Security Announcement: openSUSE-SU-2012:0589 (Google Search) https://hermes.opensuse.org/messages/14441362 http://www.ubuntu.com/usn/USN-1695-1 XForce ISS Database: rpm-loadsigverify-code-execution(74582) https://exchange.xforce.ibmcloud.com/vulnerabilities/74582
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.