Anfälligkeitssuche        Suche in 172616 CVE Beschreibungen
und 81291 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.851129
Kategorie:SuSE Local Security Checks
Titel:SUSE: Security Advisory for krb5 (SUSE-SU-2015:1897-1)
Zusammenfassung:The remote host is missing an update for the 'krb5'; package(s) announced via the referenced advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'krb5'
package(s) announced via the referenced advisory.

Vulnerability Insight:
krb5 was updated to fix three security issues.

These security issues were fixed:

- CVE-2015-2695: Applications which call gss_inquire_context() on a
partially-established SPNEGO context could have caused the GSS-API
library to read from a pointer using the wrong type, generally causing a
process crash. (bsc#952188).

- CVE-2015-2696: Applications which call gss_inquire_context() on a
partially-established IAKERB context could have caused the GSS-API
library to read from a pointer using the wrong type, generally causing a
process crash. (bsc#952189).

- CVE-2015-2697: Incorrect string handling in build_principal_va can lead
to DOS (bsc#952190).

Affected Software/OS:
krb5 on SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Desktop 12

Solution:
Please install the updated package(s).

CVSS Score:
7.1

CVSS Vector:
AV:N/AC:M/Au:N/C:N/I:N/A:C

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2015-2695
BugTraq ID: 90687
http://www.securityfocus.com/bid/90687
Debian Security Information: DSA-3395 (Google Search)
http://www.debian.org/security/2015/dsa-3395
https://security.gentoo.org/glsa/201611-14
http://www.securitytracker.com/id/1034084
SuSE Security Announcement: SUSE-SU-2015:1897 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00006.html
SuSE Security Announcement: SUSE-SU-2015:1898 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00007.html
SuSE Security Announcement: openSUSE-SU-2015:1928 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00014.html
SuSE Security Announcement: openSUSE-SU-2015:1997 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00022.html
http://www.ubuntu.com/usn/USN-2810-1
Common Vulnerability Exposure (CVE) ID: CVE-2015-2696
BugTraq ID: 90675
http://www.securityfocus.com/bid/90675
Common Vulnerability Exposure (CVE) ID: CVE-2015-2697
BugTraq ID: 77581
http://www.securityfocus.com/bid/77581
CopyrightCopyright (C) 2015 Greenbone Networks GmbH

Dies ist nur einer von 81291 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2020 E-Soft Inc. Alle Rechte vorbehalten.