ID de Prueba:	1.3.6.1.4.1.25623.1.0.871723
Categoría:	Red Hat Local Security Checks
Título:	RedHat Update for expat RHSA-2016:2824-01
Resumen:	The remote host is missing an update for the 'expat'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'expat' package(s) announced via the referenced advisory. Vulnerability Insight: Expat is a C library for parsing XML documents. Security Fix(es): * An out-of-bounds read flaw was found in the way Expat processed certain input. A remote attacker could send specially crafted XML that, when parsed by an application using the Expat library, would cause that application to crash or, possibly, execute arbitrary code with the permission of the user running the application. (CVE-2016-0718) Red Hat would like to thank Gustavo Grieco for reporting this issue. Affected Software/OS: expat on Red Hat Enterprise Linux Desktop (v. 6), Red Hat Enterprise Linux Server (v. 6), Red Hat Enterprise Linux Server (v. 7), Red Hat Enterprise Linux Workstation (v. 6) Solution: Please Install the Updated Packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-0718 http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html BugTraq ID: 90729 http://www.securityfocus.com/bid/90729 Debian Security Information: DSA-3582 (Google Search) http://www.debian.org/security/2016/dsa-3582 http://seclists.org/fulldisclosure/2017/Feb/68 https://security.gentoo.org/glsa/201701-21 http://packetstormsecurity.com/files/141350/ESET-Endpoint-Antivirus-6-Remote-Code-Execution.html http://www.openwall.com/lists/oss-security/2016/05/17/12 RedHat Security Advisories: RHSA-2016:2824 http://rhn.redhat.com/errata/RHSA-2016-2824.html RedHat Security Advisories: RHSA-2018:2486 https://access.redhat.com/errata/RHSA-2018:2486 http://www.securitytracker.com/id/1036348 http://www.securitytracker.com/id/1036415 http://www.securitytracker.com/id/1037705 SuSE Security Announcement: SUSE-SU-2016:1508 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.html SuSE Security Announcement: SUSE-SU-2016:1512 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.html SuSE Security Announcement: openSUSE-SU-2016:1441 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.html SuSE Security Announcement: openSUSE-SU-2016:1523 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.html SuSE Security Announcement: openSUSE-SU-2016:1964 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html SuSE Security Announcement: openSUSE-SU-2016:2026 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html http://www.ubuntu.com/usn/USN-2983-1 http://www.ubuntu.com/usn/USN-3044-1
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.