Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 146377 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.882772
Kategorie:CentOS Local Security Checks
Titel:CentOS Update for augeas CESA-2017:2788 centos7
Zusammenfassung:Check the version of augeas
Beschreibung:Summary:
Check the version of augeas

Vulnerability Insight:
Augeas is a configuration editing tool.
It parses configuration files in their native formats and transforms them into
a tree. Configuration changes are made by manipulating this tree and saving it
back into native config files.

Security Fix(es):

* A vulnerability was discovered in augeas affecting the handling of
escaped strings. An attacker could send crafted strings that would cause
the application using augeas to copy past the end of a buffer, leading to a
crash or possible code execution. (CVE-2017-7555)

This issue was discovered by Han Han (Red Hat).

Affected Software/OS:
augeas on CentOS 7

Solution:
Please Install the Updated Packages.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2017-7555
BugTraq ID: 100378
http://www.securityfocus.com/bid/100378
Debian Security Information: DSA-3949 (Google Search)
http://www.debian.org/security/2017/dsa-3949
https://github.com/hercules-team/augeas/pull/480
RedHat Security Advisories: RHSA-2017:2788
https://access.redhat.com/errata/RHSA-2017:2788
RedHat Security Advisories: RHSA-2019:2403
https://access.redhat.com/errata/RHSA-2019:2403
CopyrightCopyright (C) 2017 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.