Slackware 14.2 / current : libtiff (SSA:2019-308-01)
high Nessus Plugin ID 130507
Language:
New! Plugin Severity Now Using CVSS v3
The calculated severity for Plugins has been updated to use CVSS v3 by default. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Synopsis
The remote Slackware host is missing a security update.Description
New libtiff packages are available for Slackware 14.2 and -current to fix security issues.Solution
Update the affected libtiff package.See Also
Plugin Details
Severity: High
ID: 130507
File Name: Slackware_SSA_2019-308-01.nasl
Version: 1.2
Type: local
Family: Slackware Local Security Checks
Published: 11/5/2019
Updated: 12/17/2019
Dependencies: ssh_get_info.nasl
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Temporal Vector: CVSS2#E:U/RL:OF/RC:C
CVSS v3
Risk Factor: High
Base Score: 8.8
Temporal Score: 7.7
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:2.3:o:slackware:slackware_linux:*:*:*:*:*:*:*:*, cpe:2.3:o:slackware:slackware_linux:14.2:*:*:*:*:*:*:*, p-cpe:2.3:a:slackware:slackware_linux:libtiff:*:*:*:*:*:*:*
Required KB Items: Host/local_checks_enabled, Host/Slackware/release, Host/Slackware/packages
Exploit Ease: No known exploits are available
Patch Publication Date: 11/4/2019
Vulnerability Publication Date: 11/12/2018
Reference Information
SSA: 2019-308-01