Test Kennung:	1.3.6.1.4.1.25623.1.0.120124
Kategorie:	Amazon Linux Local Security Checks
Titel:	Amazon Linux: Security Advisory (ALAS-2013-245)
Zusammenfassung:	The remote host is missing an update announced via the referenced Security Advisory.
Beschreibung:	Summary: The remote host is missing an update announced via the referenced Security Advisory. Vulnerability Insight: It was discovered that gc's implementation of the malloc() and calloc() routines did not properly perform parameter sanitization when allocating memory. If an application using gc did not implement application-level validity checks for the malloc() and calloc() routines, a remote attacker could provide specially crafted application-specific input, which, when processed by the application, could lead to an application crash or, potentially, arbitrary code execution with the privileges of the user running the application. (CVE-2012-2673 ) Solution: Run yum update gc to update your system. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2673 BugTraq ID: 54227 http://www.securityfocus.com/bid/54227 http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082926.html http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082988.html http://www.mandriva.com/security/advisories?name=MDVSA-2012:158 http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/ http://www.openwall.com/lists/oss-security/2012/06/05/1 http://www.openwall.com/lists/oss-security/2012/06/07/13 RedHat Security Advisories: RHSA-2013:1500 http://rhn.redhat.com/errata/RHSA-2013-1500.html RedHat Security Advisories: RHSA-2014:0149 http://rhn.redhat.com/errata/RHSA-2014-0149.html RedHat Security Advisories: RHSA-2014:0150 http://rhn.redhat.com/errata/RHSA-2014-0150.html http://www.ubuntu.com/usn/USN-1546-1
Copyright	Copyright (C) 2015 Eero Volotinen

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.