Test Kennung:	1.3.6.1.4.1.25623.1.0.120159
Kategorie:	Amazon Linux Local Security Checks
Titel:	Amazon Linux: Security Advisory (ALAS-2014-294)
Zusammenfassung:	The remote host is missing an update announced via the referenced Security Advisory.
Beschreibung:	Summary: The remote host is missing an update announced via the referenced Security Advisory. Vulnerability Insight: The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service (slapd crash) by unbinding immediately after a search request, which triggers rwm_conn_destroy to free the session context while it is being used by rwm_op_search. Solution: Run yum update openldap to update your system. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4449 BugTraq ID: 63190 http://www.securityfocus.com/bid/63190 Bugtraq: 20191211 APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra (Google Search) https://seclists.org/bugtraq/2019/Dec/23 Cisco Security Advisory: 20140401 Cisco Unified Communications Manager Denial of Service Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-4449 Debian Security Information: DSA-3209 (Google Search) http://www.debian.org/security/2015/dsa-3209 http://seclists.org/fulldisclosure/2019/Dec/26 http://www.mandriva.com/security/advisories?name=MDVSA-2014:026 http://www.openwall.com/lists/oss-security/2013/10/19/3 RedHat Security Advisories: RHSA-2014:0126 http://rhn.redhat.com/errata/RHSA-2014-0126.html RedHat Security Advisories: RHSA-2014:0206 http://rhn.redhat.com/errata/RHSA-2014-0206.html http://www.securitytracker.com/id/1029711
Copyright	Copyright (C) 2015 Eero Volotinen

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.