Test Kennung:	1.3.6.1.4.1.25623.1.1.2.2019.2228
Kategorie:	Huawei EulerOS Local Security Checks
Titel:	Huawei EulerOS: Security Advisory for quagga (EulerOS-SA-2019-2228)
Zusammenfassung:	The remote host is missing an update for the Huawei EulerOS 'quagga' package(s) announced via the EulerOS-SA-2019-2228 advisory.
Beschreibung:	Summary: The remote host is missing an update for the Huawei EulerOS 'quagga' package(s) announced via the EulerOS-SA-2019-2228 advisory. Vulnerability Insight: It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ to be compatible with a message size, however, BUFSIZ is system-dependent.(CVE-2016-1245) The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input.(CVE-2018-5380) The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of 'Capabilities' in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_parse function. The parser can enter an infinite loop on invalid capabilities if a Multi-Protocol capability does not have a recognized AFI/SAFI, causing a denial of service.(CVE-2018-5381) Affected Software/OS: 'quagga' package(s) on Huawei EulerOS V2.0SP5. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1245 BugTraq ID: 93775 http://www.securityfocus.com/bid/93775 Debian Security Information: DSA-3695 (Google Search) https://www.debian.org/security/2016/dsa-3695 https://security.gentoo.org/glsa/201701-48 RedHat Security Advisories: RHSA-2017:0794 http://rhn.redhat.com/errata/RHSA-2017-0794.html Common Vulnerability Exposure (CVE) ID: CVE-2018-5380 CERT/CC vulnerability note: VU#940439 http://www.kb.cert.org/vuls/id/940439 Debian Security Information: DSA-4115 (Google Search) https://www.debian.org/security/2018/dsa-4115 https://security.gentoo.org/glsa/201804-17 https://lists.debian.org/debian-lts-announce/2018/02/msg00021.html https://usn.ubuntu.com/3573-1/ Common Vulnerability Exposure (CVE) ID: CVE-2018-5381
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.