Test Kennung:	1.3.6.1.4.1.25623.1.0.71128
Kategorie:	Red Hat Local Security Checks
Titel:	RedHat Security Advisory RHSA-2012:0324
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory RHSA-2012:0324. The libxml2 library is a development toolbox providing the implementation of various XML standards. It was found that the hashing routine used by libxml2 arrays was susceptible to predictable hash collisions. Sending a specially-crafted message to an XML service could result in longer processing time, which could lead to a denial of service. To mitigate this issue, randomization has been added to the hashing function to reduce the chance of an attacker successfully causing intentional collisions. (CVE-2012-0841) All users of libxml2 are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. The desktop must be restarted (log out, then log back in) for this update to take effect. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2012-0324.html Risk factor : Medium
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0841 http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html BugTraq ID: 52107 http://www.securityfocus.com/bid/52107 Debian Security Information: DSA-2417 (Google Search) http://www.debian.org/security/2012/dsa-2417 http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=660846 http://www.openwall.com/lists/oss-security/2012/02/22/1 RedHat Security Advisories: RHSA-2012:0324 http://rhn.redhat.com/errata/RHSA-2012-0324.html RedHat Security Advisories: RHSA-2013:0217 http://rhn.redhat.com/errata/RHSA-2013-0217.html http://securitytracker.com/id?1026723 http://secunia.com/advisories/54886 http://secunia.com/advisories/55568 SuSE Security Announcement: SUSE-SU-2013:1627 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html
Copyright	Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.