The remote VMware ESX / ESXi host is affected by multiple vulnerabilities :

  - Multiple integer overflow conditions exist in the glibc     package in file malloc/malloc.c. An unauthenticated,     remote attacker can exploit these to cause heap memory     corruption by passing large values to the pvalloc(),     valloc(), posix_memalign(), memalign(), or     aligned_alloc() functions, resulting in a denial of     service. (CVE-2013-4332)

  - A distributed denial of service (DDoS) vulnerability     exists in the NTP daemon due to improper handling of the     'monlist' command. A remote attacker can exploit this,     via a forged request to an affected NTP server, to cause     an amplified response to the intended target of the DDoS     attack. (CVE-2013-5211)

Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in glibc's memory allocator functions (pvalloc, valloc, and memalign). If an application used such a function, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2013-4332)

A flaw was found in the regular expression matching routines that process multibyte character input. If an application utilized the glibc regular expression matching mechanism, an attacker could provide specially crafted input that, when processed, would cause the application to crash. (CVE-2013-0242)

It was found that getaddrinfo() did not limit the amount of stack memory used during name resolution. An attacker able to make an application resolve an attacker-controlled hostname or IP address could possibly cause the application to exhaust all stack memory and crash. (CVE-2013-1914)

Among other changes, this update includes an important fix for the following bug :

  - Due to a defect in the initial release of the     getaddrinfo() system call in Scientific Linux 6.0,     AF_INET and AF_INET6 queries resolved from the     /etc/hosts file returned queried names as canonical     names. This incorrect behavior is, however, still     considered to be the expected behavior. As a result of a     recent change in getaddrinfo(), AF_INET6 queries started     resolving the canonical names correctly. However, this     behavior was unexpected by applications that relied on     queries resolved from the /etc/hosts file, and these     applications could thus fail to operate properly. This     update applies a fix ensuring that AF_INET6 queries     resolved from /etc/hosts always return the queried name     as canonical. Note that DNS lookups are resolved     properly and always return the correct canonical names.
    A proper fix to AF_INET6 queries resolution from     /etc/hosts may be applied in future releases; for now,     due to a lack of standard, Red Hat suggests the first     entry in the /etc/hosts file, that applies for the IP     address being resolved, to be considered the canonical     entry.

This glibc update fixes a critical privilege escalation problem and the following security and non-security issues :

  - bnc#892073: An off-by-one error leading to a heap-based     buffer overflow was found in __gconv_translit_find(). An     exploit that targets the problem is publicly available.
    (CVE-2014-5119)

  - bnc#882600: Copy filename argument in     posix_spawn_file_actions_addopen. (CVE-2014-4043)

  - bnc#860501: Use O_LARGEFILE for utmp file.

  - bnc#842291: Fix typo in     glibc-2.5-dlopen-lookup-race.diff.

  - bnc#839870: Fix integer overflows in malloc.
    (CVE-2013-4332)

  - bnc#834594: Fix readdir_r with long file names.
    (CVE-2013-4237)

  - bnc#824639: Drop lock before calling malloc_printerr.

  - bnc#801246: Fix buffer overrun in regexp matcher.
    (CVE-2013-0242)

  - bnc#779320: Fix buffer overflow in strcoll.
    (CVE-2012-4412)

  - bnc#894556 / bnc#894553: Fix crashes on invalid input in     IBM gconv modules. (CVE-2014-6040, CVE-2012-6656,     bnc#894553, bnc#894556, BZ#17325, BZ#14134)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated glibc packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the Name Server Caching Daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in glibc's memory allocator functions (pvalloc, valloc, and memalign). If an application used such a function, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2013-4332)

This update also fixes the following bug :

* Prior to this update, the size of the L3 cache in certain CPUs for SMP (Symmetric Multiprocessing) servers was not correctly detected.
The incorrect cache size detection resulted in less than optimal performance for routines that used this information, including the memset() function. To fix this bug, the cache size detection has been corrected and core routines including memset() have their performance restored to expected levels. (BZ#1011424)

All glibc users are advised to upgrade to these updated packages, which contain backported patches to correct these issues.

Updated glibc packages that fix three security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the Name Server Caching Daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in glibc's memory allocator functions (pvalloc, valloc, and memalign). If an application used such a function, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2013-4332)

A flaw was found in the regular expression matching routines that process multibyte character input. If an application utilized the glibc regular expression matching mechanism, an attacker could provide specially crafted input that, when processed, would cause the application to crash. (CVE-2013-0242)

It was found that getaddrinfo() did not limit the amount of stack memory used during name resolution. An attacker able to make an application resolve an attacker-controlled hostname or IP address could possibly cause the application to exhaust all stack memory and crash. (CVE-2013-1914)

Among other changes, this update includes an important fix for the following bug :

* Due to a defect in the initial release of the getaddrinfo() system call in Red Hat enterprise Linux 6.0, AF_INET and AF_INET6 queries resolved from the /etc/hosts file returned queried names as canonical names. This incorrect behavior is, however, still considered to be the expected behavior. As a result of a recent change in getaddrinfo(), AF_INET6 queries started resolving the canonical names correctly.
However, this behavior was unexpected by applications that relied on queries resolved from the /etc/hosts file, and these applications could thus fail to operate properly. This update applies a fix ensuring that AF_INET6 queries resolved from /etc/hosts always return the queried name as canonical. Note that DNS lookups are resolved properly and always return the correct canonical names. A proper fix to AF_INET6 queries resolution from /etc/hosts may be applied in future releases; for now, due to a lack of standard, Red Hat suggests the first entry in the /etc/hosts file, that applies for the IP address being resolved, to be considered the canonical entry.
(BZ#1022022)

These updated glibc packages also include additional bug fixes and various enhancements. Space precludes documenting all of these changes in this advisory. Users are directed to the Red Hat Enterprise Linux 6.5 Technical Notes, linked to in the References, for information on the most significant of these changes.

All glibc users are advised to upgrade to these updated packages, which contain backported patches to correct these issues and add these enhancements.

Existing statically linked applications must be rebuilt to fix CVE-2013-4788.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1411 advisory.

    [2.5-118.2]
    - Fix integer overflows in *valloc and memalign. (#1011804).

    [2.5-118.1]
    - Add support for newer L3 caches on x86-64 and correctly count       the number of hardware threads sharing a cacheline (#1011424).

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in glibc's memory allocator functions (pvalloc, valloc, and memalign). If an application used such a function, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2013-4332)

This update also fixes the following bug :

  - Prior to this update, the size of the L3 cache in     certain CPUs for SMP (Symmetric Multiprocessing) servers     was not correctly detected. The incorrect cache size     detection resulted in less than optimal performance for     routines that used this information, including the     memset() function. To fix this bug, the cache size     detection has been corrected and core routines including     memset() have their performance restored to expected     levels.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1605 advisory.

    - Fix getaddrinfo stack overflow resulting in application crash (CVE-2013-1914, #951213).
    - Fix multibyte character processing crash in regexp (CVE-2013-0242, #951213).

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It was discovered that the GNU C Library incorrectly handled the strcoll() function. An attacker could use this issue to cause a denial of service, or possibly execute arbitrary code. (CVE-2012-4412, CVE-2012-4424)

It was discovered that the GNU C Library incorrectly handled multibyte characters in the regular expression matcher. An attacker could use this issue to cause a denial of service. (CVE-2013-0242)

It was discovered that the GNU C Library incorrectly handled large numbers of domain conversion results in the getaddrinfo() function. An attacker could use this issue to cause a denial of service.
(CVE-2013-1914)

It was discovered that the GNU C Library readdir_r() function incorrectly handled crafted NTFS or CIFS images. An attacker could use this issue to cause a denial of service, or possibly execute arbitrary code. (CVE-2013-4237)

It was discovered that the GNU C Library incorrectly handled memory allocation. An attacker could use this issue to cause a denial of service. (CVE-2013-4332).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote VMware ESXi host is version 5.1 prior to build 2323236. It is, therefore, affected by the following vulnerabilities in bundled third-party libraries :

  - Multiple vulnerabilities exist in the bundled Python     library. (CVE-2011-3389, CVE-2012-0845, CVE-2012-0876,     CVE-2012-1150, CVE-2013-1752, CVE-2013-4238)

  - Multiple vulnerabilities exist in the bundled GNU C     Library (glibc). (CVE-2013-0242, CVE-2013-1914,     CVE-2013-4332)

  - Multiple vulnerabilities exist in the bundled XML     Parser library (libxml2). (CVE-2013-2877, CVE-2014-0191)

  - Multiple vulnerabilities exist in the bundled cURL     library (libcurl). (CVE-2014-0015, CVE-2014-0138)

The remote VMware ESXi host is version 5.5 prior to build 1623387. It is, therefore, affected by multiple vulnerabilities :

  - Multiple integer overflow conditions exist in the     bundled GNU C Library (glibc) due to improper validation     of user-supplied input. A remote attacker can exploit     these issues to cause a buffer overflow, resulting in a     denial of service condition. (CVE-2013-4332)

  - A flaw exists in the monlist feature in NTP. A remote     attacker can exploit this flaw, using a specially     crafted packet to load the query function in monlist, to     conduct a distributed denial of service attack.
    (CVE-2013-5211)

This update fixes the following issues in glibc :

  - CVE-2012-4412: glibc: buffer overflow in strcoll

  - CVE-2013-0242: glibc: DoS due to a buffer overrun in     regexp matcher by processing multibyte characters

  - CVE-2013-1914: glibc: stack overflow in getaddrinfo()     sorting

  - CVE-2013-2207: glibc: pt_chown tricked into granting     access to another users pseudo-terminal

  - CVE-2013-4237: glibc: Buffer overwrite - NAME_MAX not     enforced by readdir_r()

  - bnc#805054: man 1 locale mentions non-existent file

  - bnc#813306: glibc 2.17 fprintf(stderr, ...) triggers     write of undefined values if stderr is closed

  - bnc#819383: pldd a process multiple times can freeze the     process

  - bnc#819524: nscd segfault

  - bnc#824046: glibc: blacklist code in bindresvport     doesn't release lock, results in double-lock

  - bnc#839870: glibc: three integer overflows in memory     allocator

  - ARM: Support loading unmarked objects from cache

This update for glibc contains the following fixes :

  - Fix integer overflows in malloc. (CVE-2013-4332,     bnc#839870)

  - Fix buffer overflow in glob. (bnc#691365)

  - Fix buffer overflow in strcoll. (CVE-2012-4412,     bnc#779320)

  - Update mount flags in <sys/mount.h>. (bnc#791928)

  - Fix buffer overrun in regexp matcher. (CVE-2013-0242,     bnc#801246)

  - Fix memory leaks in dlopen. (bnc#811979)

  - Fix stack overflow in getaddrinfo with many results.
    (CVE-2013-1914, bnc#813121)

  - Fix check for XEN build in glibc_post_upgrade that     causes missing init re-exec. (bnc#818628)

  - Don't raise UNDERFLOW in tan/tanf for small but normal     argument. (bnc#819347)

  - Properly cross page boundary in SSE4.2 implementation of     strcmp. (bnc#822210)

  - Fix robust mutex handling after fork. (bnc#827811)

  - Fix missing character in IBM-943 charset. (bnc#828235)

  - Fix use of alloca in gaih_inet. (bnc#828637)

  - Initialize pointer guard also in static executables.
    (CVE-2013-4788, bnc#830268)

  - Fix readdir_r with long file names. (CVE-2013-4237,     bnc#834594)

The remote host is affected by the vulnerability described in GLSA-201503-04 (GNU C Library: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in the GNU C Library.
      Please review the CVE identifiers referenced below for details.
  Impact :

    A local attacker may be able to execute arbitrary code or cause a Denial       of Service condition,.
  Workaround :

    There is no known workaround at this time.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
87674	VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2014-0002)	Nessus	Misc.	2015/12/30	2021/1/6	medium
71193	Scientific Linux Security Update : glibc on SL6.x i386/x86_64 (20131121)	Nessus	Scientific Linux Local Security Checks	2013/12/4	2021/1/14	medium
83638	SUSE SLES10 Security Update : glibc (SUSE-SU-2014:1128-1)	Nessus	SuSE Local Security Checks	2015/5/20	2021/1/19	high
79155	CentOS 5 : glibc (CESA-2013:1411)	Nessus	CentOS Local Security Checks	2014/11/12	2021/1/4	medium
79166	CentOS 6 : glibc (CESA-2013:1605)	Nessus	CentOS Local Security Checks	2014/11/12	2021/1/4	medium
70180	Fedora 19 : glibc-2.17-18.fc19 (2013-17475)	Nessus	Fedora Local Security Checks	2013/9/28	2021/1/11	medium
70363	Oracle Linux 5 : glibc (ELSA-2013-1411)	Nessus	Oracle Linux Local Security Checks	2013/10/10	2025/4/29	high
70393	Scientific Linux Security Update : glibc on SL5.x i386/x86_64 (20131008)	Nessus	Scientific Linux Local Security Checks	2013/10/11	2021/1/14	medium
71106	Oracle Linux 6 : glibc (ELSA-2013-1605)	Nessus	Oracle Linux Local Security Checks	2013/11/27	2025/4/29	high
71009	RHEL 6 : glibc (RHSA-2013:1605)	Nessus	Red Hat Local Security Checks	2013/11/21	2021/1/14	medium
70538	Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : eglibc vulnerabilities (USN-1991-1)	Nessus	Ubuntu Local Security Checks	2013/10/22	2019/9/19	high
79862	ESXi 5.1 < Build 2323236 Third-Party Libraries Multiple Vulnerabilities (remote check) (BEAST)	Nessus	Misc.	2014/12/12	2022/12/5	medium
83781	ESXi 5.5 < Build 1623387 Multiple Vulnerabilities (remote check)	Nessus	Misc.	2015/5/22	2018/8/6	medium
75154	openSUSE Security Update : glibc (openSUSE-SU-2013:1510-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	high
71307	SuSE 11.2 Security Update : glibc (SAT Patch Number 8335)	Nessus	SuSE Local Security Checks	2013/12/10	2021/1/19	high
81689	GLSA-201503-04 : GNU C Library: Multiple vulnerabilities (GHOST)	Nessus	Gentoo Local Security Checks	2015/3/9	2021/1/11	high

检测

插件搜索

medium

medium

high

medium

medium

medium

high

medium

high

medium

high

medium

medium

high

high

high