Detections
Analytics
SuSE 11.3 Security Update : glibc (SAT Patch Number 10357)
high Nessus Plugin ID 81667
Language:
Synopsis
The remote SuSE 11 host is missing one or more security updates.Description
glibc has ben updated to fix three security issues :- wordexp failed to honour WRDE_NOCMD (bsc#906371).
(CVE-2014-7817)
- Fixed invalid file descriptor reuse while sending DNS query (bsc#915526). (CVE-2013-7423)
- Fixed buffer overflow in wscanf (bsc#916222) These non-security issues have been fixed:. (CVE-2015-1472)
- Remove inaccurate assembler implementations of ceill, floorl, nearbyintl, roundl, truncl for PowerPC64 (bsc#917072)
- Don't return IPv4 addresses when looking for IPv6 addresses only (bsc#904461)
Solution
Apply SAT patch number 10357.See Also
https://bugzilla.novell.com/show_bug.cgi?id=904461
https://bugzilla.novell.com/show_bug.cgi?id=906371
https://bugzilla.novell.com/show_bug.cgi?id=915526
https://bugzilla.novell.com/show_bug.cgi?id=916222
https://bugzilla.novell.com/show_bug.cgi?id=917072
http://support.novell.com/security/cve/CVE-2013-7423.html
http://support.novell.com/security/cve/CVE-2014-7817.html
Plugin Details
Severity: High
ID: 81667
File Name: suse_11_glibc-150226.nasl
Version: 1.7
Type: local
Agent: unix
Family: SuSE Local Security Checks
Published: 3/6/2015
Updated: 1/6/2021
Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 7.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C
Vulnerability Information
CPE: p-cpe:/a:novell:suse_linux:11:glibc-i18ndata, p-cpe:/a:novell:suse_linux:11:glibc-info, p-cpe:/a:novell:suse_linux:11:glibc-profile, p-cpe:/a:novell:suse_linux:11:glibc-32bit, p-cpe:/a:novell:suse_linux:11:glibc-html, p-cpe:/a:novell:suse_linux:11:glibc, p-cpe:/a:novell:suse_linux:11:nscd, p-cpe:/a:novell:suse_linux:11:glibc-profile-32bit, p-cpe:/a:novell:suse_linux:11:glibc-locale, cpe:/o:novell:suse_linux:11, p-cpe:/a:novell:suse_linux:11:glibc-devel-32bit, p-cpe:/a:novell:suse_linux:11:glibc-devel, p-cpe:/a:novell:suse_linux:11:glibc-locale-32bit
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
Patch Publication Date: 2/26/2015
Reference Information
CVE: CVE-2013-7423, CVE-2014-7817, CVE-2014-9402, CVE-2015-1472