ID de Prueba:	1.3.6.1.4.1.25623.1.0.120124
Categoría:	Amazon Linux Local Security Checks
Título:	Amazon Linux: Security Advisory (ALAS-2013-245)
Resumen:	The remote host is missing an update for the 'gc' package(s) announced via the ALAS-2013-245 advisory.
Descripción:	Summary: The remote host is missing an update for the 'gc' package(s) announced via the ALAS-2013-245 advisory. Vulnerability Insight: It was discovered that gc's implementation of the malloc() and calloc() routines did not properly perform parameter sanitization when allocating memory. If an application using gc did not implement application-level validity checks for the malloc() and calloc() routines, a remote attacker could provide specially crafted application-specific input, which, when processed by the application, could lead to an application crash or, potentially, arbitrary code execution with the privileges of the user running the application. (CVE-2012-2673) Affected Software/OS: 'gc' package(s) on Amazon Linux. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2673 54227 http://www.securityfocus.com/bid/54227 FEDORA-2012-9556 http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082926.html FEDORA-2012-9637 http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082988.html MDVSA-2012:158 http://www.mandriva.com/security/advisories?name=MDVSA-2012:158 RHSA-2013:1500 http://rhn.redhat.com/errata/RHSA-2013-1500.html RHSA-2014:0149 http://rhn.redhat.com/errata/RHSA-2014-0149.html RHSA-2014:0150 http://rhn.redhat.com/errata/RHSA-2014-0150.html USN-1546-1 http://www.ubuntu.com/usn/USN-1546-1 [oss-security] 20120605 memory allocator upstream patches http://www.openwall.com/lists/oss-security/2012/06/05/1 [oss-security] 20120607 Re: memory allocator upstream patches http://www.openwall.com/lists/oss-security/2012/06/07/13 http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/ https://github.com/ivmai/bdwgc/blob/master/ChangeLog https://github.com/ivmai/bdwgc/commit/6a93f8e5bcad22137f41b6c60a1c7384baaec2b3 https://github.com/ivmai/bdwgc/commit/83231d0ab5ed60015797c3d1ad9056295ac3b2bb https://github.com/ivmai/bdwgc/commit/be9df82919960214ee4b9d3313523bff44fd99e1 https://github.com/ivmai/bdwgc/commit/e10c1eb9908c2774c16b3148b30d2f3823d66a9a
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.