ID de Prueba:	1.3.6.1.4.1.25623.1.1.2.2019.2054
Categoría:	Huawei EulerOS Local Security Checks
Título:	Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2019-2054)
Resumen:	The remote host is missing an update for the Huawei EulerOS 'curl' package(s) announced via the EulerOS-SA-2019-2054 advisory.
Descripción:	Summary: The remote host is missing an update for the Huawei EulerOS 'curl' package(s) announced via the EulerOS-SA-2019-2054 advisory. Vulnerability Insight: A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.(CVE-2019-5436) The ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensitive information from process memory in opportunistic circumstances by reading a workstation screen during use of a --write-out argument ending in a '%' character, which leads to a heap-based buffer over-read.(CVE-2017-7407) Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in information exposure and denial of service.(CVE-2018-16842) The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which might allow remote attackers to authenticate as other users via a request, a similar issue to CVE-2014-0015.(CVE-2016-0755) Affected Software/OS: 'curl' package(s) on Huawei EulerOS V2.0SP3. Solution: Please install the updated package(s). CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-0755 http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html BugTraq ID: 82307 http://www.securityfocus.com/bid/82307 Debian Security Information: DSA-3455 (Google Search) http://www.debian.org/security/2016/dsa-3455 http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176546.html http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177342.html http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176413.html http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177383.html https://security.gentoo.org/glsa/201701-47 http://packetstormsecurity.com/files/135695/Slackware-Security-Advisory-curl-Updates.html http://www.securitytracker.com/id/1034882 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.519965 SuSE Security Announcement: openSUSE-SU-2016:0360 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-02/msg00031.html SuSE Security Announcement: openSUSE-SU-2016:0373 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-02/msg00044.html SuSE Security Announcement: openSUSE-SU-2016:0376 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-02/msg00047.html http://www.ubuntu.com/usn/USN-2882-1 Common Vulnerability Exposure (CVE) ID: CVE-2017-7407 https://security.gentoo.org/glsa/201709-14 https://github.com/curl/curl/commit/1890d59905414ab84a35892b2e45833654aa5c13 RedHat Security Advisories: RHSA-2018:3558 https://access.redhat.com/errata/RHSA-2018:3558 Common Vulnerability Exposure (CVE) ID: CVE-2019-5436 Bugtraq: 20200225 [SECURITY] [DSA 4633-1] curl security update (Google Search) https://seclists.org/bugtraq/2020/Feb/36 https://curl.haxx.se/docs/CVE-2019-5436.html https://security.netapp.com/advisory/ntap-20190606-0004/ https://support.f5.com/csp/article/K55133295 https://support.f5.com/csp/article/K55133295?utm_source=f5support&utm_medium=RSS Debian Security Information: DSA-4633 (Google Search) https://www.debian.org/security/2020/dsa-4633 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SMG3V4VTX2SE3EW3HQTN3DDLQBTORQC2/ https://security.gentoo.org/glsa/202003-29 https://www.oracle.com/security-alerts/cpuapr2020.html https://www.oracle.com/security-alerts/cpuoct2020.html https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html http://www.openwall.com/lists/oss-security/2019/09/11/6 SuSE Security Announcement: openSUSE-SU-2019:1492 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00008.html SuSE Security Announcement: openSUSE-SU-2019:1508 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00017.html
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.