Scientific Linux Security Update : glibc on SL6.x i386/x86_64

This script is Copyright (C) 2015-2016 Tenable Network Security, Inc.


Synopsis :

The remote Scientific Linux host is missing one or more security
updates.

Description :

An out-of-bounds read flaw was found in the way glibc's iconv()
function converted certain encoded data to UTF-8. An attacker able to
make an application call the iconv() function with a specially crafted
argument could use this flaw to crash that application.
(CVE-2014-6040)

It was found that the wordexp() function would perform command
substitution even when the WRDE_NOCMD flag was specified. An attacker
able to provide specially crafted input to an application using the
wordexp() function, and not sanitizing the input correctly, could
potentially use this flaw to execute arbitrary commands with the
credentials of the user running that application. (CVE-2014-7817)

This update also fixes the following bugs :

- Previously, when an address lookup using the
getaddrinfo() function for the AF_UNSPEC value was
performed on a defective DNS server, the server in some
cases responded with a valid response for the A record,
but a referral response for the AAAA record, which
resulted in a lookup failure. A prior update was
implemented for getaddrinfo() to return the valid
response, but it contained a typographical error, due to
which the lookup could under some circumstances still
fail. This error has been corrected and getaddrinfo()
now returns a valid response in the described
circumstances.

- An error in the dlopen() library function previously
caused recursive calls to dlopen() to terminate
unexpectedly or to abort with a library assertion. This
error has been fixed and recursive calls to dlopen() no
longer crash or abort.

See also :

http://www.nessus.org/u?a90c9644

Solution :

Update the affected packages.

Risk factor :

Medium / CVSS Base Score : 5.0
(CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P)

Family: Scientific Linux Local Security Checks

Nessus Plugin ID: 80409 ()

Bugtraq ID:

CVE ID: CVE-2014-6040
CVE-2014-7817

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now