Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-RU-2016:0496-1

Опубликовано: 17 фев. 2016
Источник: suse-cvrf

Описание

Recommended update for certification-sles-eal4

The EAL4 Configuration Guide has been updated to version 1.14, covering the recently released glibc patches to fix CVE-2015-7547.

Список пакетов

SUSE Linux Enterprise Server 12
certification-sles-eal4-12.0-0.16.1
SUSE Linux Enterprise Server for SAP Applications 12
certification-sles-eal4-12.0-0.16.1

Ссылки

Описание

Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.

Затронутые продукты
SUSE Linux Enterprise Server 12:certification-sles-eal4-12.0-0.16.1
SUSE Linux Enterprise Server for SAP Applications 12:certification-sles-eal4-12.0-0.16.1
Ссылки
Уязвимость SUSE-RU-2016:0496-1