ID de Prueba:	1.3.6.1.4.1.25623.1.0.121358
Categoría:	Gentoo Local Security Checks
Título:	Gentoo Security Advisory GLSA 201503-04
Resumen:	Gentoo Linux Local Security Checks GLSA 201503-04
Descripción:	Summary: Gentoo Linux Local Security Checks GLSA 201503-04 Vulnerability Insight: Multiple vulnerabilities have been discovered in the GNU C Library. Please review the CVE identifiers referenced below for details. Solution: Update the affected packages to the latest available version. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-3404 https://security.gentoo.org/glsa/201503-04 http://www.openwall.com/lists/oss-security/2012/07/11/17 RedHat Security Advisories: RHSA-2012:1098 http://rhn.redhat.com/errata/RHSA-2012-1098.html RedHat Security Advisories: RHSA-2012:1200 http://rhn.redhat.com/errata/RHSA-2012-1200.html http://www.ubuntu.com/usn/USN-1589-1 Common Vulnerability Exposure (CVE) ID: CVE-2012-3405 Common Vulnerability Exposure (CVE) ID: CVE-2012-3406 RedHat Security Advisories: RHSA-2012:1097 http://rhn.redhat.com/errata/RHSA-2012-1097.html RedHat Security Advisories: RHSA-2012:1185 http://rhn.redhat.com/errata/RHSA-2012-1185.html Common Vulnerability Exposure (CVE) ID: CVE-2012-3480 BugTraq ID: 54982 http://www.securityfocus.com/bid/54982 http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085190.html http://sourceware.org/bugzilla/show_bug.cgi?id=14459 http://sourceware.org/ml/libc-alpha/2012-08/msg00202.html http://www.openwall.com/lists/oss-security/2012/08/13/4 http://www.openwall.com/lists/oss-security/2012/08/13/6 http://osvdb.org/84710 RedHat Security Advisories: RHSA-2012:1207 http://rhn.redhat.com/errata/RHSA-2012-1207.html RedHat Security Advisories: RHSA-2012:1208 http://rhn.redhat.com/errata/RHSA-2012-1208.html RedHat Security Advisories: RHSA-2012:1262 http://rhn.redhat.com/errata/RHSA-2012-1262.html RedHat Security Advisories: RHSA-2012:1325 http://rhn.redhat.com/errata/RHSA-2012-1325.html http://www.securitytracker.com/id?1027374 http://secunia.com/advisories/50201 http://secunia.com/advisories/50422 Common Vulnerability Exposure (CVE) ID: CVE-2012-4412 Bugtraq: 20190613 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series (Google Search) https://seclists.org/bugtraq/2019/Jun/14 http://seclists.org/fulldisclosure/2019/Jun/18 http://www.mandriva.com/security/advisories?name=MDVSA-2013:283 http://www.mandriva.com/security/advisories?name=MDVSA-2013:284 http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html http://www.openwall.com/lists/oss-security/2012/09/07/9 http://secunia.com/advisories/55113 http://www.ubuntu.com/usn/USN-1991-1 Common Vulnerability Exposure (CVE) ID: CVE-2012-4424 http://www.openwall.com/lists/oss-security/2012/09/13/16 Common Vulnerability Exposure (CVE) ID: CVE-2012-6656 BugTraq ID: 69472 http://www.securityfocus.com/bid/69472 Debian Security Information: DSA-3142 (Google Search) http://www.debian.org/security/2015/dsa-3142 http://www.mandriva.com/security/advisories?name=MDVSA-2014:175 http://www.openwall.com/lists/oss-security/2014/08/29/3 http://www.openwall.com/lists/oss-security/2014/09/02/1 http://www.ubuntu.com/usn/USN-2432-1 Common Vulnerability Exposure (CVE) ID: CVE-2013-0242 BugTraq ID: 57638 http://www.securityfocus.com/bid/57638 http://www.mandriva.com/security/advisories?name=MDVSA-2013:163 http://sourceware.org/bugzilla/show_bug.cgi?id=15078 http://sourceware.org/ml/libc-alpha/2013-01/msg00967.html http://www.openwall.com/lists/oss-security/2013/01/30/5 http://osvdb.org/89747 RedHat Security Advisories: RHSA-2013:0769 http://rhn.redhat.com/errata/RHSA-2013-0769.html RedHat Security Advisories: RHSA-2013:1605 http://rhn.redhat.com/errata/RHSA-2013-1605.html http://www.securitytracker.com/id/1028063 http://secunia.com/advisories/51951 XForce ISS Database: glibc-extendbuffers-dos(81707) https://exchange.xforce.ibmcloud.com/vulnerabilities/81707 Common Vulnerability Exposure (CVE) ID: CVE-2013-1914 BugTraq ID: 58839 http://www.securityfocus.com/bid/58839 http://seclists.org/fulldisclosure/2021/Sep/0 http://packetstormsecurity.com/files/164014/Moxa-Command-Injection-Cross-Site-Scripting-Vulnerable-Software.html https://bugzilla.novell.com/show_bug.cgi?id=813121 https://bugzilla.redhat.com/show_bug.cgi?id=947882 http://www.openwall.com/lists/oss-security/2013/04/03/2 http://www.openwall.com/lists/oss-security/2013/04/03/8 http://www.openwall.com/lists/oss-security/2013/04/05/1 http://secunia.com/advisories/52817 Common Vulnerability Exposure (CVE) ID: CVE-2013-2207 https://sourceware.org/ml/libc-alpha/2013-08/msg00160.html SuSE Security Announcement: SUSE-SU-2015:1424 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html SuSE Security Announcement: SUSE-SU-2016:0470 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html http://www.ubuntu.com/usn/USN-2985-1 http://www.ubuntu.com/usn/USN-2985-2 Common Vulnerability Exposure (CVE) ID: CVE-2013-4237 BugTraq ID: 61729 http://www.securityfocus.com/bid/61729 http://www.openwall.com/lists/oss-security/2013/08/12/8 Common Vulnerability Exposure (CVE) ID: CVE-2013-4332 BugTraq ID: 62324 http://www.securityfocus.com/bid/62324 http://www.openwall.com/lists/oss-security/2013/09/12/6 RedHat Security Advisories: RHSA-2013:1411 http://rhn.redhat.com/errata/RHSA-2013-1411.html Common Vulnerability Exposure (CVE) ID: CVE-2013-4458 https://sourceware.org/ml/libc-alpha/2013-10/msg00733.html Common Vulnerability Exposure (CVE) ID: CVE-2013-4788 BugTraq ID: 61183 http://www.securityfocus.com/bid/61183 http://seclists.org/fulldisclosure/2015/Sep/23 http://hmarco.org/bugs/CVE-2013-4788.html http://www.openwall.com/lists/oss-security/2013/07/15/9 Common Vulnerability Exposure (CVE) ID: CVE-2014-4043 BugTraq ID: 68006 http://www.securityfocus.com/bid/68006 Bugtraq: 20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X (Google Search) https://seclists.org/bugtraq/2019/Sep/7 http://seclists.org/fulldisclosure/2019/Sep/7 http://www.mandriva.com/security/advisories?name=MDVSA-2014:152 http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html SuSE Security Announcement: openSUSE-SU-2015:1387 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00012.html XForce ISS Database: gnuclibrary-cve20144043-code-exec(93784) https://exchange.xforce.ibmcloud.com/vulnerabilities/93784 Common Vulnerability Exposure (CVE) ID: CVE-2015-0235 http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html BugTraq ID: 72325 http://www.securityfocus.com/bid/72325 BugTraq ID: 91787 http://www.securityfocus.com/bid/91787 Bugtraq: 20150127 GHOST gethostbyname() heap overflow in glibc (CVE-2015-0235) (Google Search) http://seclists.org/oss-sec/2015/q1/269 Bugtraq: 20150127 Qualys Security Advisory CVE-2015-0235 - GHOST: glibc gethostbyname buffer overflow (Google Search) http://seclists.org/oss-sec/2015/q1/274 Bugtraq: 20150311 OpenSSL v1.0.2 for Linux affected by CVE-2015-0235 (Google Search) http://www.securityfocus.com/archive/1/534845/100/0/threaded Cisco Security Advisory: 20150128 GNU glibc gethostbyname Function Buffer Overflow Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150128-ghost http://seclists.org/fulldisclosure/2015/Jan/111 HPdes Security Advisory: HPSBGN03247 http://marc.info/?l=bugtraq&m=142296726407499&w=2 HPdes Security Advisory: HPSBGN03270 http://marc.info/?l=bugtraq&m=142781412222323&w=2 HPdes Security Advisory: HPSBGN03285 http://marc.info/?l=bugtraq&m=142722450701342&w=2 HPdes Security Advisory: HPSBHF03289 http://marc.info/?l=bugtraq&m=142721102728110&w=2 HPdes Security Advisory: HPSBMU03330 http://marc.info/?l=bugtraq&m=143145428124857&w=2 HPdes Security Advisory: SSRT101937 HPdes Security Advisory: SSRT101953 http://www.mandriva.com/security/advisories?name=MDVSA-2015:039 http://packetstormsecurity.com/files/130171/Exim-ESMTP-GHOST-Denial-Of-Service.html http://packetstormsecurity.com/files/130768/EMC-Secure-Remote-Services-GHOST-SQL-Injection-Command-Injection.html http://packetstormsecurity.com/files/130974/Exim-GHOST-glibc-gethostbyname-Buffer-Overflow.html https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability https://www.qualys.com/research/security-advisories/GHOST-CVE-2015-0235.txt http://www.openwall.com/lists/oss-security/2021/05/04/7 RedHat Security Advisories: RHSA-2015:0126 http://rhn.redhat.com/errata/RHSA-2015-0126.html http://www.securitytracker.com/id/1032909 http://secunia.com/advisories/62517 http://secunia.com/advisories/62640 http://secunia.com/advisories/62667 http://secunia.com/advisories/62680 http://secunia.com/advisories/62681 http://secunia.com/advisories/62688 http://secunia.com/advisories/62690 http://secunia.com/advisories/62691 http://secunia.com/advisories/62692 http://secunia.com/advisories/62698 http://secunia.com/advisories/62715 http://secunia.com/advisories/62758 http://secunia.com/advisories/62812 http://secunia.com/advisories/62813 http://secunia.com/advisories/62816 http://secunia.com/advisories/62865 http://secunia.com/advisories/62870 http://secunia.com/advisories/62871 http://secunia.com/advisories/62879 http://secunia.com/advisories/62883
Copyright	Copyright (C) 2015 Eero Volotinen

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.