ID de Prueba:	1.3.6.1.4.1.25623.1.1.2.2019.1801
Categoría:	Huawei EulerOS Local Security Checks
Título:	Huawei EulerOS: Security Advisory for patch (EulerOS-SA-2019-1801)
Resumen:	The remote host is missing an update for the Huawei EulerOS 'patch' package(s) announced via the EulerOS-SA-2019-1801 advisory.
Descripción:	Summary: The remote host is missing an update for the Huawei EulerOS 'patch' package(s) announced via the EulerOS-SA-2019-1801 advisory. Vulnerability Insight: Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to arbitrary files with the permissions of the target user via a .. (dot dot) in a diff file name.(CVE-2015-1395) A double-free flaw was found in the way the patch utility processed patch files. An attacker could potentially use this flaw to crash the patch utility by tricking it into processing crafted patches.(CVE-2018-6952) Affected Software/OS: 'patch' package(s) on Huawei EulerOS V2.0SP5. Solution: Please install the updated package(s). CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:C/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1395 BugTraq ID: 72846 http://www.securityfocus.com/bid/72846 http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148953.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154214.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775873 http://www.openwall.com/lists/oss-security/2015/01/27/28 http://www.ubuntu.com/usn/USN-2651-1 Common Vulnerability Exposure (CVE) ID: CVE-2018-6952 BugTraq ID: 103047 http://www.securityfocus.com/bid/103047 https://security.gentoo.org/glsa/201904-17 https://savannah.gnu.org/bugs/index.php?53133 RedHat Security Advisories: RHSA-2019:2033 https://access.redhat.com/errata/RHSA-2019:2033
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.