Test Kennung:	1.3.6.1.4.1.25623.1.1.2.2019.2613
Kategorie:	Huawei EulerOS Local Security Checks
Titel:	Huawei EulerOS: Security Advisory for libplist (EulerOS-SA-2019-2613)
Zusammenfassung:	The remote host is missing an update for the Huawei EulerOS 'libplist' package(s) announced via the EulerOS-SA-2019-2613 advisory.
Beschreibung:	Summary: The remote host is missing an update for the Huawei EulerOS 'libplist' package(s) announced via the EulerOS-SA-2019-2613 advisory. Vulnerability Insight: libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.(CVE-2017-5835) The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via Apple Property List data that is too short.(CVE-2017-5545) The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file.(CVE-2017-5834) The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY and then triggers an invalid free.(CVE-2017-5836) Affected Software/OS: 'libplist' package(s) on Huawei EulerOS V2.0SP3. Solution: Please install the updated package(s). CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-5545 BugTraq ID: 95702 http://www.securityfocus.com/bid/95702 https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html Common Vulnerability Exposure (CVE) ID: CVE-2017-5834 BugTraq ID: 96022 http://www.securityfocus.com/bid/96022 http://www.openwall.com/lists/oss-security/2017/01/31/6 http://www.openwall.com/lists/oss-security/2017/02/02/4 Common Vulnerability Exposure (CVE) ID: CVE-2017-5835 Common Vulnerability Exposure (CVE) ID: CVE-2017-5836
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.