Multiple buffer overflows in the NMEA parser (nmea-gen.c) in gypsy 0.8 allow local users to cause a denial of service (crash) via unspecified vectors related to the sprintf function.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gypsy: multiple vulnerabilities (CVE-2011-0523)

  - Multiple buffer overflows in the NMEA parser (nmea-gen.c) in gypsy 0.8 allow local users to cause a denial     of service (crash) via unspecified vectors related to the sprintf function. (CVE-2011-0524)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The following changes have been made :

  - Add gypsy-CVE-2011-0523.patch: add config file to     restrict the files that can be read. Fix CVE-2011-0523     and bnc#666839.

  - Add gypsy-CVE-2011-0524.patch: use snprintf() to avoid     buffer overflows. Fix CVE-2011-0524 and bnc#666839.

  - Add gnome-common BuildRequires and call to     gnome-autogen.sh for gypsy-CVE-2011-0523.patch, since it     touches the build system.

- New upstream 0.9 release

    - add patch to fix FTBSF due to deprecated g_type_init

    - Fix CVE-2011-0523 - read arbitrary files as the root       user on behalf of a regular user

    - Fix CVE-2011-0524 - buffer overflow in nmea device       input handling (code no longer in existence)

    - aarch64 support

    - Fix segfault

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
199944	RHEL 6 : gypsy (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
74681	openSUSE Security Update : gypsy (openSUSE-SU-2012:0884-1)	Nessus	SuSE Local Security Checks	low
66654	Fedora 17 : gypsy-0.9-1.fc17 (2013-8705)	Nessus	Fedora Local Security Checks	low
66649	Fedora 18 : gypsy-0.9-1.fc18 (2013-8687)	Nessus	Fedora Local Security Checks	low
66645	Fedora 19 : gypsy-0.9-1.fc19 (2013-8659)	Nessus	Fedora Local Security Checks	low

Detections

Analytics

CVE-2011-0524

medium

Tenable Plugins

medium

low

low

low

low