Test Kennung:	1.3.6.1.4.1.25623.1.0.851151
Kategorie:	SuSE Local Security Checks
Titel:	SUSE: Security Advisory for grub2 (SUSE-SU-2015:2399-1)
Zusammenfassung:	The remote host is missing an update for the 'grub2'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'grub2' package(s) announced via the referenced advisory. Vulnerability Insight: This update for grub2 provides the following fixes and enhancements: Security issue fixed: - Fix buffer overflows when reading username and password. (bsc#956631, CVE-2015-8370) Non security issues fixed: - Expand list of grub.cfg search path in PV Xen guests for systems installed on btrfs snapshots. (bsc#946148, bsc#952539) - Add --image switch to force zipl update to specific kernel. (bsc#928131) - Do not use shim lock protocol for reading PE header as it won't be available when secure boot is disabled. (bsc#943380) - Make firmware flaw condition be more precisely detected and add debug message for the case. Affected Software/OS: grub2 on SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Desktop 12 Solution: Please install the updated package(s). CVSS Score: 6.9 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8370 BugTraq ID: 79358 http://www.securityfocus.com/bid/79358 Bugtraq: 20151215 Back to 28: Grub2 Authentication Bypass 0-Day [CVE-2015-8370] (Google Search) http://www.securityfocus.com/archive/1/537115/100/0/threaded Debian Security Information: DSA-3421 (Google Search) http://www.debian.org/security/2015/dsa-3421 http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174049.html http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173703.html http://seclists.org/fulldisclosure/2015/Dec/69 https://security.gentoo.org/glsa/201512-03 http://hmarco.org/bugs/CVE-2015-8370-Grub2-authentication-bypass.html http://packetstormsecurity.com/files/134831/Grub2-Authentication-Bypass.html http://www.openwall.com/lists/oss-security/2015/12/15/6 RedHat Security Advisories: RHSA-2015:2623 http://rhn.redhat.com/errata/RHSA-2015-2623.html http://www.securitytracker.com/id/1034422 SuSE Security Announcement: SUSE-SU-2015:2385 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00039.html SuSE Security Announcement: SUSE-SU-2015:2386 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00040.html SuSE Security Announcement: SUSE-SU-2015:2387 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00041.html SuSE Security Announcement: SUSE-SU-2015:2399 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00044.html SuSE Security Announcement: openSUSE-SU-2015:2375 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00037.html SuSE Security Announcement: openSUSE-SU-2015:2392 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00043.html SuSE Security Announcement: openSUSE-SU-2016:0036 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00003.html http://www.ubuntu.com/usn/USN-2836-1
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.