The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1811 advisory.

    The netpbm packages contain a library of functions which support programs     for handling various graphics file formats, including .pbm (Portable Bit     Map), .pgm (Portable Gray Map), .pnm (Portable Any Map), .ppm (Portable     Pixel Map), and others.

    Two heap-based buffer overflow flaws were found in the embedded JasPer     library, which is used to provide support for Part 1 of the JPEG 2000 image     compression standard in the jpeg2ktopam and pamtojpeg2k tools. An attacker     could create a malicious JPEG 2000 compressed image file that could cause     jpeg2ktopam to crash or, potentially, execute arbitrary code with the     privileges of the user running jpeg2ktopam. These flaws do not affect     pamtojpeg2k. (CVE-2011-4516, CVE-2011-4517)

    A stack-based buffer overflow flaw was found in the way the xpmtoppm tool     processed X PixMap (XPM) image files. An attacker could create a malicious     XPM file that would cause xpmtoppm to crash or, potentially, execute     arbitrary code with the privileges of the user running xpmtoppm.
    (CVE-2009-4274)

    Red Hat would like to thank Jonathan Foote of the CERT Coordination Center     for reporting the CVE-2011-4516 and CVE-2011-4517 issues.

    All users of netpbm are advised to upgrade to these updated packages,     which contain backported patches to correct these issues.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Jonathan Foote discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash or possibly execute arbitrary code with user privileges.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated rhevm-spice-client packages that fix multiple security issues, several bugs, and add one enhancement are now available for Red Hat Enterprise Virtualization Manager 3.

Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Red Hat Enterprise Virtualization Manager provides access to virtual machines using SPICE. These SPICE client packages provide the SPICE client and usbclerk service for both Windows 32-bit operating systems and Windows 64-bit operating systems.

This update adds support for the TLS Fallback Signaling Cipher Suite Value (TLS_FALLBACK_SCSV), which can be used to prevent protocol downgrade attacks against applications which re-connect using a lower SSL/TLS protocol version when the initial connection indicating the highest supported protocol version fails.

This can prevent a forceful downgrade of the communication to SSL 3.0.
The SSL 3.0 protocol was found to be vulnerable to the padding oracle attack when using block cipher suites in cipher block chaining (CBC) mode. This issue is identified as CVE-2014-3566, and also known under the alias POODLE. This SSL 3.0 protocol flaw will not be addressed in a future update; it is recommended that users configure their applications to require at least TLS protocol version 1.0 for secure communication.

For additional information about this flaw, see the Knowledgebase article at https://access.redhat.com/articles/1232123

Multiple flaws were found in the way JasPer decoded JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code. (CVE-2014-8138, CVE-2014-8157, CVE-2014-8158, CVE-2014-9029, CVE-2014-8137, CVE-2011-4516, CVE-2011-4517, CVE-2008-3520, CVE-2008-3522)

Red Hat would like to thank oCERT for reporting CVE-2014-8137, CVE-2014-8138, CVE-2014-8157, CVE-2014-8158, CVE-2014-9029, CVE-2011-4516, and CVE-2011-4517. oCERT acknowledges Jose Duart of the Google Security Team as the original reporter of CVE-2014-8137 and CVE-2014-8138; and pyddeh as the original reporter of CVE-2014-8157 and CVE-2014-8158.

The mingw-openssl and mingw-jasper packages have been upgraded to the latest upstream version, which provides a number of bug fixes and enhancements over the previous version. (BZ#1187585)

This update also fixes the following bugs :

* Previously, a guest system installed with tools incorrectly always started in full screen mode, even when the 'Open in Full Screen' option was unchecked in console options. Now, when connecting in window mode with the option unchecked, the guest system starts in a window as expected. (BZ#1172126)

* Prior to this update, copying and pasting of images from the client to the guest did not work when spice-gtk was built from upstream. Now, images can be copied and pasted without problems. (BZ#1187270)

In addition, this update adds the following enhancement :

* Administrators now have the option of automatic multiuser installation of virt-viewer onto many client workstations.
(BZ#1187272)

All rhevm-spice-client users are advised to upgrade to these updated packages, which correct these issues and add these enhancement.

Multiple vulnerabilities has been discovered and corrected in jasper :

Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a JPEG2000 file (CVE-2011-4516).

The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code, or cause a denial of service (heap memory corruption), via a malformed JPEG2000 file (CVE-2011-4517).

The updated packages have been patched to correct these issues.

The remote Solaris system is missing necessary patches to address security updates :

  - Heap-based buffer overflow in the jpc_cox_getcompparms     function in libjasper/ jpc/jpc_cs.c in JasPer 1.900.1     allows remote attackers to execute arbitrary code or     cause a denial of service (memory corruption) via a     crafted numrlvls value in a coding style default (COD)     marker segment in a JPEG2000 file. (CVE-2011-4516)

  - The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c     in JasPer 1.900.1 uses an incorrect data type during a     certain size calculation, which allows remote attackers     to trigger a heap-based buffer overflow and execute     arbitrary code, or cause a denial of service (heap     memory corruption), via a crafted component registration     (CRG) marker segment in a JPEG2000 file. (CVE-2011-4517)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-558:01 advisory.

    The netpbm package contains a library of functions which support programs for handling various graphics     file formats, including .pbm (portable bitmaps), .pgm (portable graymaps), .pnm (portable anymaps), .ppm     (portable pixmaps) and others.
    Security issues fixed with this release:
    CVE-2009-4274     Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent     attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an XPM     image file that contains a crafted header field associated with a large color index value.
    CVE-2011-4516     Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer     1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)     via a crafted numrlvls value in a JPEG2000 file.
    CVE-2011-4517     The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type     during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow     and execute arbitrary code, or cause a denial of service (heap memory corruption), via a malformed     JPEG2000 file.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Add patches for all current CVEs.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The following bug has been fixed :

  - Specially crafted JPEG2000 files could have caused a     heap buffer overflow in jasper. (CVE-2011-4516 /     CVE-2011-4517)

Fedora reports :

JasPer fails to properly decode marker segments and other sections in malformed JPEG2000 files. Malformed inputs can cause heap buffer overflows which in turn may result in execution of attacker-controlled code.

The following issue has been fixed :

  - Specially crafted JPEG2000 files could cause a heap     buffer overflow in jasper (CVE-2011-4516 /     CVE-2011-4517)

Updated jasper packages that fix two security issues are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

JasPer is an implementation of Part 1 of the JPEG 2000 image compression standard.

Two heap-based buffer overflow flaws were found in the way JasPer decoded JPEG 2000 compressed image files. An attacker could create a malicious JPEG 2000 compressed image file that, when opened, would cause applications that use JasPer (such as Nautilus) to crash or, potentially, execute arbitrary code. (CVE-2011-4516, CVE-2011-4517)

Red Hat would like to thank Jonathan Foote of the CERT Coordination Center for reporting these issues.

Users are advised to upgrade to these updated packages, which contain a backported patch to correct these issues. All applications using the JasPer libraries (such as Nautilus) must be restarted for the update to take effect.

CVE-2011-4516, CVE-2011-4517 jasper: heap buffer overflow flaws lead to arbitrary code execution (CERT VU#887409)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1807 advisory.

    [1.900.1-15.1]
    - CERT VU#887409: heap buffer overflow flaws lead to arbitrary code execution       (#749149)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

- jasper-1.900.1-bnc725758.patch: Two security bugs     allowing buffer overflow to be caused by incorrect image     data (bnc#725758, CVE-2011-4516 and CVE-2011-4517)

Specially crafted JPEG2000 files could cause a heap buffer overflow in jasper (CVE-2011-4516, CVE-2011-4517)

It was discovered that Ghostscript did not correctly handle memory allocation when parsing certain malformed JPEG-2000 images. If a user or automated system were tricked into opening a specially crafted image, an attacker could cause a denial of service and possibly execute arbitrary code with user privileges. (CVE-2008-3520)

It was discovered that Ghostscript did not correctly handle certain formatting operations when parsing JPEG-2000 images. If a user or automated system were tricked into opening a specially crafted image, an attacker could cause a denial of service and possibly execute arbitrary code with user privileges. (CVE-2008-3522)

It was discovered that Ghostscript incorrectly handled certain malformed TrueType fonts. If a user or automated system were tricked into opening a document containing a specially crafted font, an attacker could cause a denial of service and possibly execute arbitrary code with user privileges. This issue only affected Ubuntu 8.04 LTS. (CVE-2009-3743)

It was discovered that Ghostscript incorrectly handled certain malformed Type 2 fonts. If a user or automated system were tricked into opening a document containing a specially crafted font, an attacker could cause a denial of service and possibly execute arbitrary code with user privileges. This issue only affected Ubuntu 8.04 LTS. (CVE-2010-4054)

Jonathan Foote discovered that Ghostscript incorrectly handled certain malformed JPEG-2000 image files. If a user or automated system were tricked into opening a specially crafted JPEG-2000 image file, an attacker could cause Ghostscript to crash or possibly execute arbitrary code with user privileges. (CVE-2011-4516, CVE-2011-4517).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
57081	RHEL 4 / 5 : netpbm (RHSA-2011:1811)	Nessus	Red Hat Local Security Checks	2011/12/13	2024/11/4	critical
57357	Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : jasper vulnerabilities (USN-1315-1)	Nessus	Ubuntu Local Security Checks	2011/12/21	2019/9/19	medium
81969	RHEL 6 : rhevm-spice-client (RHSA-2015:0698) (POODLE)	Nessus	Red Hat Local Security Checks	2015/3/20	2019/11/12	low
57331	Mandriva Linux Security Advisory : jasper (MDVSA-2011:189)	Nessus	Mandriva Local Security Checks	2011/12/19	2021/1/6	medium
80618	Oracle Solaris Third-Party Patch Update : ghostscript (multiple_denial_of_service_vulnerabilities7)	Nessus	Solaris Local Security Checks	2015/1/19	2021/1/14	medium
283919	MiracleLinux 3 : netpbm-10.35.58-8.AXS3.3 (AXSA:2011-558:01)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/2/12	high
80067	Fedora 20 : mingw-jasper-1.900.1-24.fc20 (2014-17027)	Nessus	Fedora Local Security Checks	2014/12/17	2021/1/11	high
57313	SuSE 10 Security Update : jasper (ZYPP Patch Number 7878)	Nessus	SuSE Local Security Checks	2011/12/15	2021/1/19	medium
66012	FreeBSD : jasper -- buffer overflow (8ff84335-a7da-11e2-b3f5-003067c2616f)	Nessus	FreeBSD Local Security Checks	2013/4/18	2021/1/6	critical
57108	SuSE 11.1 Security Update : jasper (SAT Patch Number 5523)	Nessus	SuSE Local Security Checks	2011/12/13	2021/1/19	medium
57378	CentOS 6 : jasper (CESA-2011:1807)	Nessus	CentOS Local Security Checks	2011/12/23	2021/1/4	medium
57416	Fedora 15 : jasper-1.900.1-18.fc15 (2011-16955)	Nessus	Fedora Local Security Checks	2012/1/3	2021/1/11	medium
68403	Oracle Linux 6 : jasper (ELSA-2011-1807)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	critical
74535	openSUSE Security Update : jasper (openSUSE-2011-87)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	medium
75869	openSUSE Security Update : jasper (openSUSE-SU-2011:1328-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	medium
57436	Ubuntu 8.04 LTS / 10.04 LTS / 10.10 : ghostscript vulnerabilities (USN-1317-1)	Nessus	Ubuntu Local Security Checks	2012/1/5	2019/9/19	critical

检测

插件搜索

critical

medium

low

medium

medium

high

high

medium

critical

medium

medium

medium

critical

medium

medium

critical