 |
Startseite ▼ Bookkeeping
Online ▼ Sicherheits
Überprüfungs ▼
Verwaltetes
DNS ▼
Info
Bestellen/Erneuern
FAQ
AUP
Dynamic DNS Clients
Domaine konfigurieren Dyanmic DNS Update Password Netzwerk
Überwachung ▼
Enterprise
Erweiterte
Standard
Gratis Test
FAQ
Preis/Funktionszusammenfassung
Bestellen
Beispiele
Konfigurieren/Status Alarm Profile | ||
| Test Kennung: | 1.3.6.1.4.1.25623.1.1.2.2019.2207 |
| Kategorie: | Huawei EulerOS Local Security Checks |
| Titel: | Huawei EulerOS: Security Advisory for libplist (EulerOS-SA-2019-2207) |
| Zusammenfassung: | The remote host is missing an update for the Huawei EulerOS 'libplist' package(s) announced via the EulerOS-SA-2019-2207 advisory. |
| Beschreibung: | Summary: The remote host is missing an update for the Huawei EulerOS 'libplist' package(s) announced via the EulerOS-SA-2019-2207 advisory. Vulnerability Insight: The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory corruption) via a crafted plist file.(CVE-2017-6435) The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via split encoded Apple Property List data.(CVE-2017-5209) The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via Apple Property List data that is too short.(CVE-2017-5545) Affected Software/OS: 'libplist' package(s) on Huawei EulerOS V2.0SP5. Solution: Please install the updated package(s). CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P |
| Querverweis: |
Common Vulnerability Exposure (CVE) ID: CVE-2017-5209 BugTraq ID: 95385 http://www.securityfocus.com/bid/95385 https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html Common Vulnerability Exposure (CVE) ID: CVE-2017-5545 BugTraq ID: 95702 http://www.securityfocus.com/bid/95702 Common Vulnerability Exposure (CVE) ID: CVE-2017-6435 BugTraq ID: 97586 http://www.securityfocus.com/bid/97586 https://github.com/libimobiledevice/libplist/issues/93 |
| Copyright | Copyright (C) 2020 Greenbone Networks GmbH |
| Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten. |