Test Kennung:	1.3.6.1.4.1.25623.1.0.882075
Kategorie:	CentOS Local Security Checks
Titel:	CentOS Update for cups-filters CESA-2014:1795 centos7
Zusammenfassung:	Check the version of cups-filters
Beschreibung:	Summary: Check the version of cups-filters Vulnerability Insight: The cups-filters package contains backends, filters, and other softwarethat was once part of the core CUPS distribution but is now maintained independently. An out-of-bounds read flaw was found in the way the process_browse_data() function of cups-browsed handled certain browse packets. A remote attacker could send a specially crafted browse packet that, when processed by cups-browsed, would crash the cups-browsed daemon. (CVE-2014-4337) A flaw was found in the way the cups-browsed daemon interpreted the 'BrowseAllow' directive in the cups-browsed.conf file. An attacker able to add a malformed 'BrowseAllow' directive to the cups-browsed.conf file could use this flaw to bypass intended access restrictions. (CVE-2014-4338) All cups-filters users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing this update, the cups-browsed daemon will be restarted automatically. Affected Software/OS: cups-filters on CentOS 7 Solution: Please install the updated packages. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2014-4337 BugTraq ID: 68122 http://www.securityfocus.com/bid/68122 http://openwall.com/lists/oss-security/2014/06/19/12 RedHat Security Advisories: RHSA-2014:1795 http://rhn.redhat.com/errata/RHSA-2014-1795.html http://secunia.com/advisories/62044 Common Vulnerability Exposure (CVE) ID: CVE-2014-4338 BugTraq ID: 68124 http://www.securityfocus.com/bid/68124 http://openwall.com/lists/oss-security/2014/04/25/7
Copyright	Copyright (C) 2014 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.