Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

SciLinux: SLSA-2017-2788-1 Critical: Augeas Code Execution Threat

Calendar Sep 21, 2017 • User Avatar LinuxSecurity Advisories
1 - 2 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory security issue buffer overflow critical code execution augeas SL7
A vulnerability was discovered in augeas affecting the handling of escaped strings. An attacker could send crafted strings that would cause the application using augeas to copy past the end of a buffer, leading to a crash or possible code execution. (CVE-2017-7555) SL7 x86_64 augeas-1.4.0-2.el7_4.1.x86_64.rpm augeas-debuginfo-1.4.0-2.el7_4.1.i686.rpm augeas-debuginfo-1.4.0-2.el7 [More...] 
Synopsis:          Important: augeas security update
Advisory ID:       SLSA-2017:2788-1
Issue Date:        2017-09-21
CVE Numbers:       CVE-2017-7555
--

Security Fix(es):

* A vulnerability was discovered in augeas affecting the handling of
escaped strings. An attacker could send crafted strings that would cause
the application using augeas to copy past the end of a buffer, leading to
a crash or possible code execution. (CVE-2017-7555)
--

SL7
  x86_64
    augeas-1.4.0-2.el7_4.1.x86_64.rpm
    augeas-debuginfo-1.4.0-2.el7_4.1.i686.rpm
    augeas-debuginfo-1.4.0-2.el7_4.1.x86_64.rpm
    augeas-libs-1.4.0-2.el7_4.1.i686.rpm
    augeas-libs-1.4.0-2.el7_4.1.x86_64.rpm
    augeas-devel-1.4.0-2.el7_4.1.i686.rpm
    augeas-devel-1.4.0-2.el7_4.1.x86_64.rpm

- Scientific Linux Development Team