Test Kennung:	1.3.6.1.4.1.25623.1.0.882974
Kategorie:	CentOS Local Security Checks
Titel:	CentOS Update for ghostscript CESA-2018:3760 centos6
Zusammenfassung:	The remote host is missing an update for the 'ghostscript'; package(s) announced via the CESA-2018:3760 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'ghostscript' package(s) announced via the CESA-2018:3760 advisory. Vulnerability Insight: The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * It was discovered that the ghostscript /invalidaccess checks fail under certain conditions. An attacker could possibly exploit this to bypass the - -dSAFER protection and, for example, execute arbitrary shell commands via a specially crafted PostScript document. (CVE-2018-16509) Red Hat would like to thank Tavis Ormandy (Google Project Zero) for reporting this issue. Affected Software/OS: ghostscript on CentOS 6. Solution: Please install the updated package(s). CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2018-16509 BugTraq ID: 105122 http://www.securityfocus.com/bid/105122 Debian Security Information: DSA-4294 (Google Search) https://www.debian.org/security/2018/dsa-4294 https://www.exploit-db.com/exploits/45369/ https://security.gentoo.org/glsa/201811-12 http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=5516c614dc33662a2afdc377159f70218e67bde5 http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=78911a01b67d590b4a91afac2e8417360b934156 http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=79cccf641486a6595c43f1de1cd7ade696020a31 http://seclists.org/oss-sec/2018/q3/142 https://bugs.ghostscript.com/show_bug.cgi?id=699654 https://www.artifex.com/news/ghostscript-security-resolved/ https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html RedHat Security Advisories: RHSA-2018:2918 https://access.redhat.com/errata/RHSA-2018:2918 RedHat Security Advisories: RHSA-2018:3760 https://access.redhat.com/errata/RHSA-2018:3760 https://usn.ubuntu.com/3768-1/
Copyright	Copyright (C) 2018 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.