Test Kennung:	1.3.6.1.4.1.25623.1.0.851473
Kategorie:	SuSE Local Security Checks
Titel:	openSUSE: Security Advisory for icoutils (openSUSE-SU-2017:0168-1)
Zusammenfassung:	The remote host is missing an update for the 'icoutils'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'icoutils' package(s) announced via the referenced advisory. Vulnerability Insight: This update for icoutils to version 0.31.1 fixes the following issues: - CVE-2017-5208: An integer overflow allows maliciously crafted files to cause DoS or code execution (boo#1018756). - CVE-2017-5331: Incorrect out of bounds checks in check_offset allow for DoS or code execution (boo#1018756). - CVE-2017-5332: Missing out of bounds checks in extract_group_icon_cursor_resource allow for DoS or code execution (boo#1018756). - CVE-2017-5333: Incorrect out of bounds checks in check_offset allow for DoS or code execution (boo#1018756). Affected Software/OS: icoutils on openSUSE 13.2 Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-5208 BugTraq ID: 95315 http://www.securityfocus.com/bid/95315 Debian Security Information: DSA-3756 (Google Search) http://www.debian.org/security/2017/dsa-3756 https://security.gentoo.org/glsa/201801-12 http://www.openwall.com/lists/oss-security/2017/01/08/5 RedHat Security Advisories: RHSA-2017:0837 http://rhn.redhat.com/errata/RHSA-2017-0837.html Common Vulnerability Exposure (CVE) ID: CVE-2017-5331 BugTraq ID: 95378 http://www.securityfocus.com/bid/95378 Debian Security Information: DSA-3765 (Google Search) http://www.debian.org/security/2017/dsa-3765 http://www.openwall.com/lists/oss-security/2017/01/11/3 SuSE Security Announcement: openSUSE-SU-2017:0166 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00024.html SuSE Security Announcement: openSUSE-SU-2017:0167 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00025.html SuSE Security Announcement: openSUSE-SU-2017:0168 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00026.html http://www.ubuntu.com/usn/USN-3178-1 Common Vulnerability Exposure (CVE) ID: CVE-2017-5332 BugTraq ID: 95380 http://www.securityfocus.com/bid/95380 Common Vulnerability Exposure (CVE) ID: CVE-2017-5333 BugTraq ID: 95678 http://www.securityfocus.com/bid/95678
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.