Executive Summary
Summary | |
---|---|
Title | eglibc security update |
Informations | |||
---|---|---|---|
Name | DSA-3142 | First vendor Publication | 2015-01-27 |
Vendor | Debian | Last vendor Modification | 2015-01-27 |
Severity (Vendor) | N/A | Revision | 1 |
Security-Database Scoring CVSS v3
Cvss vector : N/A | |||
---|---|---|---|
Overall CVSS Score | NA | ||
Base Score | NA | Environmental Score | NA |
impact SubScore | NA | Temporal Score | NA |
Exploitabality Sub Score | NA | ||
Calculate full CVSS 3.0 Vectors scores |
Security-Database Scoring CVSS v2
Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C) | |||
---|---|---|---|
Cvss Base Score | 10 | Attack Range | Network |
Cvss Impact Score | 10 | Attack Complexity | Low |
Cvss Expoit Score | 10 | Authentication | None Required |
Calculate full CVSS 2.0 Vectors scores |
Detail
Several vulnerabilities have been fixed in eglibc, Debian's version of the GNU C library: CVE-2015-0235 Qualys discovered that the gethostbyname and gethostbyname2 functions were subject to a buffer overflow if provided with a crafted IP address argument. This could be used by an attacker to execute arbitrary code in processes which called the affected functions. The original glibc bug was reported by Peter Klotz. CVE-2014-7817 Tim Waugh of Red Hat discovered that the WRDE_NOCMD option of the wordexp function did not suppress command execution in all cases. This allows a context-dependent attacker to execute shell commands. CVE-2012-6656 CVE-2014-6040 The charset conversion code for certain IBM multi-byte code pages could perform an out-of-bounds array access, causing the process to crash. In some scenarios, this allows a remote attacker to cause a persistent denial of service. For the stable distribution (wheezy), these problems have been fixed in version 2.13-38+deb7u7. For the upcoming stable distribution (jessie) and the unstable distribution (sid), the CVE-2015-0235 issue has been fixed in version 2.18-1 of the glibc package. We recommend that you upgrade your eglibc packages. |
Original Source
Url : http://www.debian.org/security/2015/dsa-3142 |
CWE : Common Weakness Enumeration
% | Id | Name |
---|---|---|
50 % | CWE-20 | Improper Input Validation |
25 % | CWE-787 | Out-of-bounds Write (CWE/SANS Top 25) |
25 % | CWE-119 | Failure to Constrain Operations within the Bounds of a Memory Buffer |
OVAL Definitions
Definition Id: oval:org.mitre.oval:def:25924 | |||
Oval ID: | oval:org.mitre.oval:def:25924 | ||
Title: | SUSE-SU-2014:1129-1 -- Security update for glibc | ||
Description: | This glibc update fixes a critical privilege escalation problem and two additional issues: * bnc#892073: An off-by-one error leading to a heap-based buffer overflow was found in __gconv_translit_find(). An exploit that targets the problem is publicly available. (CVE-2014-5119) * bnc#836746: Avoid race between {, __de}allocate_stack and __reclaim_stacks during fork. * bnc#844309: Fixed various overflows, reading large /etc/hosts or long names. (CVE-2013-4357) * bnc#894553, bnc#894556: Fixed various crashes on invalid input in IBM gconv modules. (CVE-2014-6040, CVE-2012-6656) Security Issues: * CVE-2012-6656 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6656> * CVE-2013-4357 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4357> * CVE-2014-5119 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5119> * CVE-2014-6040 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6040> | ||
Family: | unix | Class: | patch |
Reference(s): | SUSE-SU-2014:1129-1 CVE-2014-5119 CVE-2013-4357 CVE-2014-6040 CVE-2012-6656 | Version: | 3 |
Platform(s): | SUSE Linux Enterprise Server 11 | Product(s): | glibc |
Definition Synopsis: | |||
|
Definition Id: oval:org.mitre.oval:def:26817 | |||
Oval ID: | oval:org.mitre.oval:def:26817 | ||
Title: | SUSE-SU-2014:1128-1 -- Security update for glibc | ||
Description: | This glibc update fixes a critical privilege escalation problem and the following security and non-security issues: * bnc#892073: An off-by-one error leading to a heap-based buffer overflow was found in __gconv_translit_find(). An exploit that targets the problem is publicly available. (CVE-2014-5119) * bnc#882600: Copy filename argument in posix_spawn_file_actions_addopen. (CVE-2014-4043) * bnc#860501: Use O_LARGEFILE for utmp file. * bnc#842291: Fix typo in glibc-2.5-dlopen-lookup-race.diff. * bnc#839870: Fix integer overflows in malloc. (CVE-2013-4332) * bnc#834594: Fix readdir_r with long file names. (CVE-2013-4237) * bnc#824639: Drop lock before calling malloc_printerr. * bnc#801246: Fix buffer overrun in regexp matcher. (CVE-2013-0242) * bnc#779320: Fix buffer overflow in strcoll. (CVE-2012-4412) * bnc#894556 / bnc#894553: Fix crashes on invalid input in IBM gconv modules. (CVE-2014-6040, CVE-2012-6656, bnc#894553, bnc#894556, BZ#17325, BZ#14134) Security Issues: * CVE-2014-5119 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5119> * CVE-2014-4043 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4043> * CVE-2013-4332 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4332> * CVE-2013-4237 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4237> * CVE-2013-0242 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0242> * CVE-2012-4412 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4412> | ||
Family: | unix | Class: | patch |
Reference(s): | SUSE-SU-2014:1128-1 CVE-2014-5119 CVE-2014-4043 CVE-2013-4332 CVE-2013-4237 CVE-2013-0242 CVE-2012-4412 CVE-2014-6040 CVE-2012-6656 | Version: | 3 |
Platform(s): | SUSE Linux Enterprise Server 10 | Product(s): | glibc |
Definition Synopsis: | |||
|
Definition Id: oval:org.mitre.oval:def:28047 | |||
Oval ID: | oval:org.mitre.oval:def:28047 | ||
Title: | USN-2432-1 -- GNU C Library vulnerabilities | ||
Description: | Siddhesh Poyarekar discovered that the GNU C Library incorrectly handled certain multibyte characters when using the iconv function. An attacker could possibly use this issue to cause applications to crash, resulting in a denial of service. This issue only affected Ubuntu 10.04 LTS and Ubuntu 12.04 LTS. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2012-6656">CVE-2012-6656</a>) Adhemerval Zanella Netto discovered that the GNU C Library incorrectly handled certain multibyte characters when using the iconv function. An attacker could possibly use this issue to cause applications to crash, resulting in a denial of service. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-6040">CVE-2014-6040</a>) Tim Waugh discovered that the GNU C Library incorrectly enforced the WRDE_NOCMD flag when handling the wordexp function. An attacker could possibly use this issue to execute arbitrary commands. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-7817">CVE-2014-7817</a>) | ||
Family: | unix | Class: | patch |
Reference(s): | USN-2432-1 CVE-2012-6656 CVE-2014-6040 CVE-2014-7817 | Version: | 5 |
Platform(s): | Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 | Product(s): | eglibc glibc |
Definition Synopsis: | |||
|
Definition Id: oval:org.mitre.oval:def:28088 | |||
Oval ID: | oval:org.mitre.oval:def:28088 | ||
Title: | ELSA-2014-2023 -- glibc security and bug fix update (moderate) | ||
Description: | [2.17-55.0.4.el7_0.3] - Remove strstr and strcasestr implementations using sse4.2 instructions. - Upstream commits 584b18eb4df61ccd447db2dfe8c8a7901f8c8598 and 1818483b15d22016b0eae41d37ee91cc87b37510 backported. (Jose E. Marchesi) [2.17-55.3] - Fix wordexp() to honour WRDE_NOCMD (CVE-2014-7817, #1170118) [2.17-55.2] - ftell: seek to end only when there are unflushed bytes (#1170187). [2.17-55.1] - Remove gconv transliteration loadable modules support (CVE-2014-5119, - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475, | ||
Family: | unix | Class: | patch |
Reference(s): | ELSA-2014-2023 CVE-2014-7817 | Version: | 3 |
Platform(s): | Oracle Linux 7 | Product(s): | glibc |
Definition Synopsis: | |||
|
Definition Id: oval:org.mitre.oval:def:28360 | |||
Oval ID: | oval:org.mitre.oval:def:28360 | ||
Title: | RHSA-2015:0090 -- glibc security update (Critical) | ||
Description: | The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the Name Server Caching Daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. A heap-based buffer overflow was found in glibc's __nss_hostname_digits_dots() function, which is used by the gethostbyname() and gethostbyname2() glibc function calls. A remote attacker able to make an application call either of these functions could use this flaw to execute arbitrary code with the permissions of the user running the application. (CVE-2015-0235) Red Hat would like to thank Qualys for reporting this issue. All glibc users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. | ||
Family: | unix | Class: | patch |
Reference(s): | RHSA-2015:0090 CESA-2015:0090 CVE-2015-0235 | Version: | 3 |
Platform(s): | Red Hat Enterprise Linux 5 CentOS Linux 5 | Product(s): | glibc |
Definition Synopsis: | |||
|
Definition Id: oval:org.mitre.oval:def:28438 | |||
Oval ID: | oval:org.mitre.oval:def:28438 | ||
Title: | RHSA-2015:0092 -- glibc security update (Critical) | ||
Description: | The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the Name Server Caching Daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. A heap-based buffer overflow was found in glibc's __nss_hostname_digits_dots() function, which is used by the gethostbyname() and gethostbyname2() glibc function calls. A remote attacker able to make an application call either of these functions could use this flaw to execute arbitrary code with the permissions of the user running the application. (CVE-2015-0235) Red Hat would like to thank Qualys for reporting this issue. All glibc users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. | ||
Family: | unix | Class: | patch |
Reference(s): | RHSA-2015:0092 CESA-2015:0092-CentOS 6 CESA-2015:0092-CentOS 7 CVE-2015-0235 | Version: | 3 |
Platform(s): | Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 7 CentOS Linux 6 CentOS Linux 7 | Product(s): | glibc |
Definition Synopsis: | |||
|
Definition Id: oval:org.mitre.oval:def:28439 | |||
Oval ID: | oval:org.mitre.oval:def:28439 | ||
Title: | RHSA-2014:2023 -- glibc security and bug fix update (Moderate) | ||
Description: | The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the Name Server Caching Daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. It was found that the wordexp() function would perform command substitution even when the WRDE_NOCMD flag was specified. An attacker able to provide specially crafted input to an application using the wordexp() function, and not sanitizing the input correctly, could potentially use this flaw to execute arbitrary commands with the credentials of the user running that application. (CVE-2014-7817) This issue was discovered by Tim Waugh of the Red Hat Developer Experience Team. This update also fixes the following bug: * Prior to this update, if a file stream that was opened in append mode and its underlying file descriptor were used at the same time and the file was truncated using the ftruncate() function on the file descriptor, a subsequent ftell() call on the stream incorrectly modified the file offset by seeking to the new end of the file. This update ensures that ftell() modifies the state of the file stream only when it is in append mode and its buffer is not empty. As a result, the described incorrect changes to the file offset no longer occur. (BZ#1170187) All glibc users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. | ||
Family: | unix | Class: | patch |
Reference(s): | RHSA-2014:2023 CESA-2014:2023 CVE-2014-7817 | Version: | 3 |
Platform(s): | Red Hat Enterprise Linux 7 CentOS Linux 7 | Product(s): | glibc |
Definition Synopsis: | |||
|
Definition Id: oval:org.mitre.oval:def:28503 | |||
Oval ID: | oval:org.mitre.oval:def:28503 | ||
Title: | USN-2485-1 -- GNU C Library vulnerability | ||
Description: | It was discovered that a buffer overflow existed in the gethostbyname and gethostbyname2 functions in the GNU C Library. An attacker could use this issue to execute arbitrary code or cause an application crash, resulting in a denial of service. | ||
Family: | unix | Class: | patch |
Reference(s): | USN-2485-1 CVE-2015-0235 | Version: | 3 |
Platform(s): | Ubuntu 12.04 Ubuntu 10.04 | Product(s): | eglibc |
Definition Synopsis: | |||
|
Definition Id: oval:org.mitre.oval:def:28528 | |||
Oval ID: | oval:org.mitre.oval:def:28528 | ||
Title: | DSA-3142-1 -- eglibc -- security update | ||
Description: | Several vulnerabilities have been fixed in eglibc, Debian's version of the GNU C library. | ||
Family: | unix | Class: | patch |
Reference(s): | DSA-3142-1 CVE-2012-6656 CVE-2014-6040 CVE-2014-7817 CVE-2015-0235 | Version: | 3 |
Platform(s): | Debian GNU/Linux 7.0 Debian GNU/kFreeBSD 7.0 | Product(s): | eglibc |
Definition Synopsis: | |||
|
Definition Id: oval:org.mitre.oval:def:28622 | |||
Oval ID: | oval:org.mitre.oval:def:28622 | ||
Title: | ELSA-2015-0092 -- glibc security update (critical) | ||
Description: | [2.17-55.0.4.el7_0.5] - Remove strstr and strcasestr implementations using sse4.2 instructions. - Upstream commits 584b18eb4df61ccd447db2dfe8c8a7901f8c8598 and 1818483b15d22016b0eae41d37ee91cc87b37510 backported. (Jose E. Marchesi) [2.17-55.5] - Rebuild and run regression testing. [2.17-55.4] - Fix parsing of numeric hosts in gethostbyname_r (CVE-2015-0235, #1183535). [2.17-55.3] - Fix wordexp() to honour WRDE_NOCMD (CVE-2014-7817, #1170118) [2.17-55.2] - ftell: seek to end only when there are unflushed bytes (#1170187). [2.17-55.1] - Remove gconv transliteration loadable modules support (CVE-2014-5119, - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475, | ||
Family: | unix | Class: | patch |
Reference(s): | ELSA-2015-0092 CVE-2015-0235 | Version: | 3 |
Platform(s): | Oracle Linux 6 Oracle Linux 7 | Product(s): | glibc |
Definition Synopsis: | |||
|
Definition Id: oval:org.mitre.oval:def:28638 | |||
Oval ID: | oval:org.mitre.oval:def:28638 | ||
Title: | ELSA-2015-0090 -- glibc security update (critical) | ||
Description: | [2.5-123.0.1.el5_11.1] - Switch to use malloc when the input line is too long [Orabug 19951108] - Use a /sys/devices/system/cpu/online for _SC_NPROCESSORS_ONLN implementation [Orabug 17642251] (Joe Jin) [2.5-123.1] - Fix parsing of numeric hosts in gethostbyname_r (CVE-2015-0235, #1183532). | ||
Family: | unix | Class: | patch |
Reference(s): | ELSA-2015-0090 CVE-2015-0235 | Version: | 3 |
Platform(s): | Oracle Linux 5 | Product(s): | glibc |
Definition Synopsis: | |||
|
CPE : Common Platform Enumeration
Information Assurance Vulnerability Management (IAVM)
Date | Description |
---|---|
2015-02-12 | IAVM : 2015-A-0038 - Multiple Vulnerabilities in GNU C Library (glibc) Severity : Category I - VMSKEY : V0058753 |
Snort® IPS/IDS
Date | Description |
---|---|
2016-09-27 | WordPress pingback gethostbyname heap buffer overflow attempt RuleID : 39925 - Revision : 2 - Type : SERVER-WEBAPP |
2015-03-04 | WordPress pingback gethostbyname heap buffer overflow attempt RuleID : 33275 - Revision : 2 - Type : SERVER-WEBAPP |
2015-03-04 | Exim gethostbyname heap buffer overflow attempt RuleID : 33226 - Revision : 3 - Type : SERVER-MAIL |
2015-03-04 | Exim gethostbyname heap buffer overflow attempt RuleID : 33225 - Revision : 4 - Type : SERVER-MAIL |
Nessus® Vulnerability Scanner
Date | Description |
---|---|
2017-12-04 | Name : The remote host is missing a vendor-supplied security patch. File : check_point_gaia_sk104443.nasl - Type : ACT_GATHER_INFO |
2016-07-19 | Name : The remote device is affected by a remote code execution vulnerability. File : cisco-sa-20150128-ghost-nxos.nasl - Type : ACT_GATHER_INFO |
2016-02-18 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201602-02.nasl - Type : ACT_GATHER_INFO |
2016-02-17 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2016-0013.nasl - Type : ACT_GATHER_INFO |
2015-12-11 | Name : The remote multi-function device is affected by multiple vulnerabilities. File : xerox_xrx15r.nasl - Type : ACT_GATHER_INFO |
2015-12-11 | Name : The remote multi-function device is affected by multiple vulnerabilities. File : xerox_xrx15ad_colorqube.nasl - Type : ACT_GATHER_INFO |
2015-11-10 | Name : The remote host is missing a Mac OS X update that fixes multiple security vul... File : macosx_SecUpd2015-007.nasl - Type : ACT_GATHER_INFO |
2015-10-29 | Name : The remote host is missing a Mac OS X update that fixes multiple security vul... File : macosx_10_11_1.nasl - Type : ACT_GATHER_INFO |
2015-10-05 | Name : The remote host is missing a Mac OS X update that fixes multiple security vul... File : macosx_10_11.nasl - Type : ACT_GATHER_INFO |
2015-09-18 | Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL16057.nasl - Type : ACT_GATHER_INFO |
2015-09-18 | Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL16010.nasl - Type : ACT_GATHER_INFO |
2015-09-17 | Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL16435.nasl - Type : ACT_GATHER_INFO |
2015-08-17 | Name : The remote host is missing a vendor-supplied security patch. File : cisco_cups_CSCus69785.nasl - Type : ACT_GATHER_INFO |
2015-07-01 | Name : The remote host is missing a Mac OS X update that fixes multiple security vul... File : macosx_SecUpd2015-005.nasl - Type : ACT_GATHER_INFO |
2015-07-01 | Name : The remote host is missing a Mac OS X update that fixes multiple security vul... File : macosx_10_10_4.nasl - Type : ACT_GATHER_INFO |
2015-05-20 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2014-1128-1.nasl - Type : ACT_GATHER_INFO |
2015-05-20 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2014-1129-1.nasl - Type : ACT_GATHER_INFO |
2015-05-20 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2015-0164-1.nasl - Type : ACT_GATHER_INFO |
2015-05-20 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2015-0167-1.nasl - Type : ACT_GATHER_INFO |
2015-05-20 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2015-0526-1.nasl - Type : ACT_GATHER_INFO |
2015-05-20 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2015-0550-1.nasl - Type : ACT_GATHER_INFO |
2015-05-20 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2015-0551-1.nasl - Type : ACT_GATHER_INFO |
2015-05-20 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2015-0170-1.nasl - Type : ACT_GATHER_INFO |
2015-04-02 | Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL16342.nasl - Type : ACT_GATHER_INFO |
2015-03-30 | Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2015-168.nasl - Type : ACT_GATHER_INFO |
2015-03-26 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20150305_glibc_on_SL7_x.nasl - Type : ACT_GATHER_INFO |
2015-03-26 | Name : The remote Debian host is missing a security update. File : debian_DLA-97.nasl - Type : ACT_GATHER_INFO |
2015-03-26 | Name : The remote Debian host is missing a security update. File : debian_DLA-139.nasl - Type : ACT_GATHER_INFO |
2015-03-25 | Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2015-495.nasl - Type : ACT_GATHER_INFO |
2015-03-25 | Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2015-494.nasl - Type : ACT_GATHER_INFO |
2015-03-18 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2015-0327.nasl - Type : ACT_GATHER_INFO |
2015-03-17 | Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2015-493.nasl - Type : ACT_GATHER_INFO |
2015-03-10 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2015-0327.nasl - Type : ACT_GATHER_INFO |
2015-03-09 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201503-04.nasl - Type : ACT_GATHER_INFO |
2015-03-06 | Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_glibc-150226.nasl - Type : ACT_GATHER_INFO |
2015-03-05 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2015-0327.nasl - Type : ACT_GATHER_INFO |
2015-03-05 | Name : The remote Fedora host is missing a security update. File : fedora_2015-2845.nasl - Type : ACT_GATHER_INFO |
2015-03-05 | Name : The remote Fedora host is missing a security update. File : fedora_2015-2837.nasl - Type : ACT_GATHER_INFO |
2015-03-05 | Name : The remote Fedora host is missing a security update. File : fedora_2015-2328.nasl - Type : ACT_GATHER_INFO |
2015-03-02 | Name : The remote device is missing a vendor-supplied security patch. File : cisco-sa-20150128-ghost-iosxr_NCS6K.nasl - Type : ACT_GATHER_INFO |
2015-03-02 | Name : The remote device is missing a vendor-supplied security patch. File : cisco-sa-20150128-ghost-iosxe_nova.nasl - Type : ACT_GATHER_INFO |
2015-03-02 | Name : The remote device is missing a vendor-supplied security patch. File : cisco-sa-20150128-ghost-iosxe_multi.nasl - Type : ACT_GATHER_INFO |
2015-02-27 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2015-173.nasl - Type : ACT_GATHER_INFO |
2015-02-27 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_f7a9e415bdca11e4970c000c292ee6b8.nasl - Type : ACT_GATHER_INFO |
2015-02-26 | Name : The remote device is affected by a buffer overflow vulnerability. File : cisco_cucm_CSCus66650-GHOST.nasl - Type : ACT_GATHER_INFO |
2015-02-25 | Name : The remote web server uses a version of PHP that is affected by multiple vuln... File : php_5_5_22.nasl - Type : ACT_GATHER_INFO |
2015-02-25 | Name : The remote web server uses a version of PHP that is affected by multiple vuln... File : php_5_6_6.nasl - Type : ACT_GATHER_INFO |
2015-02-25 | Name : The remote web server uses a version of PHP that is affected by multiple vuln... File : php_5_4_38.nasl - Type : ACT_GATHER_INFO |
2015-02-24 | Name : The remote Fedora host is missing a security update. File : fedora_2015-2315.nasl - Type : ACT_GATHER_INFO |
2015-02-20 | Name : The remote device is affected by a buffer overflow vulnerability. File : cisco-sa-20150128-ace.nasl - Type : ACT_GATHER_INFO |
2015-02-18 | Name : The version of Cisco TelePresence Video Communication Server installed on the... File : cisco_telepresence_vcs_CSCus69558.nasl - Type : ACT_GATHER_INFO |
2015-02-18 | Name : The remote Cisco TelePresence Conductor device is affected by a buffer overfl... File : cisco_telepresence_conductor_CSCus69523.nasl - Type : ACT_GATHER_INFO |
2015-02-11 | Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_glibc-150129.nasl - Type : ACT_GATHER_INFO |
2015-02-11 | Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2015-039.nasl - Type : ACT_GATHER_INFO |
2015-02-06 | Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2015-0126.nasl - Type : ACT_GATHER_INFO |
2015-02-04 | Name : The remote host is affected by a buffer overflow vulnerability. File : palo_alto_PAN-SA-2015-0002.nasl - Type : ACT_GATHER_INFO |
2015-02-03 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2015-84.nasl - Type : ACT_GATHER_INFO |
2015-02-02 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2015-0024.nasl - Type : ACT_GATHER_INFO |
2015-02-02 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2015-0023.nasl - Type : ACT_GATHER_INFO |
2015-02-02 | Name : The remote SuSE 10 host is missing a security-related patch. File : suse_glibc-9035.nasl - Type : ACT_GATHER_INFO |
2015-01-30 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2015-0101.nasl - Type : ACT_GATHER_INFO |
2015-01-30 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2015-0022.nasl - Type : ACT_GATHER_INFO |
2015-01-30 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2015-0101.nasl - Type : ACT_GATHER_INFO |
2015-01-29 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2015-0099.nasl - Type : ACT_GATHER_INFO |
2015-01-29 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_0765de84a6c111e4a0c1c485083ca99c.nasl - Type : ACT_GATHER_INFO |
2015-01-29 | Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2015-028-01.nasl - Type : ACT_GATHER_INFO |
2015-01-28 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20150127_glibc_on_SL6_x.nasl - Type : ACT_GATHER_INFO |
2015-01-28 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2015-0090.nasl - Type : ACT_GATHER_INFO |
2015-01-28 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2015-0092.nasl - Type : ACT_GATHER_INFO |
2015-01-28 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-3142.nasl - Type : ACT_GATHER_INFO |
2015-01-28 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2015-0092.nasl - Type : ACT_GATHER_INFO |
2015-01-28 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2015-0090.nasl - Type : ACT_GATHER_INFO |
2015-01-28 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20150127_glibc_on_SL5_x.nasl - Type : ACT_GATHER_INFO |
2015-01-28 | Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-2485-1.nasl - Type : ACT_GATHER_INFO |
2015-01-28 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2015-0090.nasl - Type : ACT_GATHER_INFO |
2015-01-28 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2015-0092.nasl - Type : ACT_GATHER_INFO |
2015-01-27 | Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_glibc-150122.nasl - Type : ACT_GATHER_INFO |
2015-01-27 | Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2015-473.nasl - Type : ACT_GATHER_INFO |
2015-01-09 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2015-0003.nasl - Type : ACT_GATHER_INFO |
2015-01-09 | Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2015-468.nasl - Type : ACT_GATHER_INFO |
2015-01-08 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2015-0016.nasl - Type : ACT_GATHER_INFO |
2015-01-08 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2015-0016.nasl - Type : ACT_GATHER_INFO |
2015-01-08 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2015-0016.nasl - Type : ACT_GATHER_INFO |
2015-01-08 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20150107_glibc_on_SL6_x.nasl - Type : ACT_GATHER_INFO |
2014-12-22 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20141218_glibc_on_SL7_x.nasl - Type : ACT_GATHER_INFO |
2014-12-22 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2014-2023.nasl - Type : ACT_GATHER_INFO |
2014-12-19 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2014-2023.nasl - Type : ACT_GATHER_INFO |
2014-12-19 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2014-2023.nasl - Type : ACT_GATHER_INFO |
2014-12-04 | Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-2432-1.nasl - Type : ACT_GATHER_INFO |
2014-11-28 | Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2014-232.nasl - Type : ACT_GATHER_INFO |
2014-10-24 | Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2014-296-01.nasl - Type : ACT_GATHER_INFO |
2014-09-12 | Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2014-175.nasl - Type : ACT_GATHER_INFO |
2014-09-12 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2014-536.nasl - Type : ACT_GATHER_INFO |
Alert History
Date | Informations |
---|---|
2016-01-22 09:26:10 |
|
2015-03-27 13:29:08 |
|
2015-01-29 21:29:41 |
|
2015-01-29 00:27:21 |
|
2015-01-28 13:24:13 |
|
2015-01-27 17:20:49 |
|