Anfälligkeitssuche        Suche in 211766 CVE Beschreibungen
und 97459 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.1.4.2013.1854.1
Kategorie:SuSE Local Security Checks
Titel:SUSE: Security Advisory (SUSE-SU-2013:1854-1)
Zusammenfassung:The remote host is missing an update for the 'glibc' package(s) announced via the SUSE-SU-2013:1854-1 advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'glibc' package(s) announced via the SUSE-SU-2013:1854-1 advisory.

Vulnerability Insight:
This update for glibc contains the following fixes:

* Fix integer overflows in malloc (CVE-2013-4332,
bnc#839870)
* Fix buffer overflow in glob (bnc#691365)
* Fix buffer overflow in strcoll (CVE-2012-4412,
bnc#779320)
* Update mount flags in (bnc#791928)
* Fix buffer overrun in regexp matcher (CVE-2013-0242,
bnc#801246)
* Fix memory leaks in dlopen (bnc#811979)
* Fix stack overflow in getaddrinfo with many results
(CVE-2013-1914, bnc#813121)
* Fix check for XEN build in glibc_post_upgrade that causes missing init re-exec (bnc#818628)
* Don't raise UNDERFLOW in tan/tanf for small but normal argument (bnc#819347)
* Properly cross page boundary in SSE4.2 implementation of strcmp (bnc#822210)
* Fix robust mutex handling after fork (bnc#827811)
* Fix missing character in IBM-943 charset (bnc#828235)
* Fix use of alloca in gaih_inet (bnc#828637)
* Initialize pointer guard also in static executables
(CVE-2013-4788, bnc#830268)
* Fix readdir_r with long file names (CVE-2013-4237,
bnc#834594).
Security Issues:
* CVE-2012-4412
>
* CVE-2013-0242
>
* CVE-2013-1914
>
* CVE-2013-4237
>
* CVE-2013-4332
>
* CVE-2013-4788
>

Affected Software/OS:
'glibc' package(s) on SUSE Linux Enterprise Software Development Kit 11 SP2, SUSE Linux Enterprise Server 11 SP2, SUSE Linux Enterprise Desktop 11 SP2

Solution:
Please install the updated package(s).

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2012-4412
Bugtraq: 20190613 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series (Google Search)
https://seclists.org/bugtraq/2019/Jun/14
http://seclists.org/fulldisclosure/2019/Jun/18
https://security.gentoo.org/glsa/201503-04
http://www.mandriva.com/security/advisories?name=MDVSA-2013:283
http://www.mandriva.com/security/advisories?name=MDVSA-2013:284
http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html
http://www.openwall.com/lists/oss-security/2012/09/07/9
http://secunia.com/advisories/55113
http://www.ubuntu.com/usn/USN-1991-1
Common Vulnerability Exposure (CVE) ID: CVE-2013-0242
BugTraq ID: 57638
http://www.securityfocus.com/bid/57638
http://www.mandriva.com/security/advisories?name=MDVSA-2013:163
http://sourceware.org/bugzilla/show_bug.cgi?id=15078
http://sourceware.org/ml/libc-alpha/2013-01/msg00967.html
http://www.openwall.com/lists/oss-security/2013/01/30/5
http://osvdb.org/89747
RedHat Security Advisories: RHSA-2013:0769
http://rhn.redhat.com/errata/RHSA-2013-0769.html
RedHat Security Advisories: RHSA-2013:1605
http://rhn.redhat.com/errata/RHSA-2013-1605.html
http://www.securitytracker.com/id/1028063
http://secunia.com/advisories/51951
XForce ISS Database: glibc-extendbuffers-dos(81707)
https://exchange.xforce.ibmcloud.com/vulnerabilities/81707
Common Vulnerability Exposure (CVE) ID: CVE-2013-1914
BugTraq ID: 58839
http://www.securityfocus.com/bid/58839
https://bugzilla.novell.com/show_bug.cgi?id=813121
https://bugzilla.redhat.com/show_bug.cgi?id=947882
http://www.openwall.com/lists/oss-security/2013/04/03/2
http://www.openwall.com/lists/oss-security/2013/04/03/8
http://www.openwall.com/lists/oss-security/2013/04/05/1
http://secunia.com/advisories/52817
Common Vulnerability Exposure (CVE) ID: CVE-2013-4237
BugTraq ID: 61729
http://www.securityfocus.com/bid/61729
http://www.openwall.com/lists/oss-security/2013/08/12/8
Common Vulnerability Exposure (CVE) ID: CVE-2013-4332
BugTraq ID: 62324
http://www.securityfocus.com/bid/62324
http://www.openwall.com/lists/oss-security/2013/09/12/6
RedHat Security Advisories: RHSA-2013:1411
http://rhn.redhat.com/errata/RHSA-2013-1411.html
Common Vulnerability Exposure (CVE) ID: CVE-2013-4788
BugTraq ID: 61183
http://www.securityfocus.com/bid/61183
http://seclists.org/fulldisclosure/2015/Sep/23
http://hmarco.org/bugs/CVE-2013-4788.html
http://www.openwall.com/lists/oss-security/2013/07/15/9
CopyrightCopyright (C) 2021 Greenbone Networks GmbH

Dies ist nur einer von 97459 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2021 E-Soft Inc. Alle Rechte vorbehalten.