Test Kennung:	1.3.6.1.4.1.25623.1.0.843379
Kategorie:	Ubuntu Local Security Checks
Titel:	Ubuntu Update for libraw USN-3492-1
Zusammenfassung:	The remote host is missing an update for the 'libraw'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'libraw' package(s) announced via the referenced advisory. Vulnerability Insight: It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, a remote attacker could cause applications linked against LibRaw to crash, resulting in a denial of service, or possibly execute arbitrary code Affected Software/OS: libraw on Ubuntu 17.10, Ubuntu 17.04, Ubuntu 16.04 LTS, Ubuntu 14.04 LTS Solution: Please Install the Updated Packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-3885 BugTraq ID: 74590 http://www.securityfocus.com/bid/74590 Bugtraq: 20150511 [oCERT-2015-006] dcraw input sanitization errors (Google Search) http://www.securityfocus.com/archive/1/535513/100/0/threaded http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162084.html http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159083.html http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159123.html http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159665.html http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159479.html http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159625.html http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159579.html http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159518.html http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159469.html https://security.gentoo.org/glsa/201701-54 https://security.gentoo.org/glsa/201706-17 http://www.ocert.org/advisories/ocert-2015-006.html Common Vulnerability Exposure (CVE) ID: CVE-2015-8366 http://packetstormsecurity.com/files/134573/LibRaw-0.17-Overflow.html http://seclists.org/fulldisclosure/2015/Nov/108 http://www.libraw.org/news/libraw-0-17-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-8367 Common Vulnerability Exposure (CVE) ID: CVE-2017-6886 BugTraq ID: 98605 http://www.securityfocus.com/bid/98605 Debian Security Information: DSA-3950 (Google Search) http://www.debian.org/security/2017/dsa-3950 https://secuniaresearch.flexerasoftware.com/advisories/75737/ https://secuniaresearch.flexerasoftware.com/secunia_research/2017-5/ Common Vulnerability Exposure (CVE) ID: CVE-2017-6887 BugTraq ID: 98592 http://www.securityfocus.com/bid/98592 https://github.com/LibRaw/LibRaw/commit/d7c3d2cb460be10a3ea7b32e9443a83c243b2251 https://secuniaresearch.flexerasoftware.com/secunia_research/2017-6/
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.