ID de Prueba:	1.3.6.1.4.1.25623.1.0.120306
Categoría:	Amazon Linux Local Security Checks
Título:	Amazon Linux: Security Advisory (ALAS-2013-198)
Resumen:	The remote host is missing an update announced via the referenced Security Advisory.
Descripción:	Summary: The remote host is missing an update announced via the referenced Security Advisory. Vulnerability Insight: An out-of-bounds access flaw was found in Mesa. If an application using Mesa exposed the Mesa API to untrusted inputs (Mozilla Firefox does this), an attacker could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2013-1872 )It was found that Mesa did not correctly validate messages from the X server. A malicious X server could cause an application using Mesa to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2013-1993 ) Solution: Run yum update mesa to update your system. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1993 Debian Security Information: DSA-2678 (Google Search) http://www.debian.org/security/2013/dsa-2678 http://www.mandriva.com/security/advisories?name=MDVSA-2013:181 http://lists.freedesktop.org/archives/mesa-dev/2013-May/039720.html http://lists.freedesktop.org/archives/mesa-dev/2013-May/039722.html http://www.openwall.com/lists/oss-security/2013/05/23/3 RedHat Security Advisories: RHSA-2013:0897 http://rhn.redhat.com/errata/RHSA-2013-0897.html RedHat Security Advisories: RHSA-2013:0898 http://rhn.redhat.com/errata/RHSA-2013-0898.html SuSE Security Announcement: openSUSE-SU-2013:0865 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-06/msg00007.html http://www.ubuntu.com/usn/USN-1888-1 Common Vulnerability Exposure (CVE) ID: CVE-2013-1872 BugTraq ID: 60285 http://www.securityfocus.com/bid/60285 Debian Security Information: DSA-2704 (Google Search) http://www.debian.org/security/2013/dsa-2704 https://bugs.freedesktop.org/show_bug.cgi?id=59429 SuSE Security Announcement: SUSE-SU-2013:1175 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00014.html SuSE Security Announcement: openSUSE-SU-2013:1188 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00019.html
Copyright	Copyright (C) 2015 Eero Volotinen

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.