ID de Prueba:	1.3.6.1.4.1.25623.1.0.105504
Categoría:	F5 Local Security Checks
Título:	F5 BIG-IP - QEMU vulnerability CVE-2012-3515
Resumen:	The remote host is missing a security patch.
Descripción:	Summary: The remote host is missing a security patch. Vulnerability Insight: Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a 'device model's address space.' Vulnerability Impact: An attacker may gain privileged access by using a crafted escape sequence. Solution: See the referenced vendor advisory for a solution. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-3515 BugTraq ID: 55413 http://www.securityfocus.com/bid/55413 Debian Security Information: DSA-2543 (Google Search) http://www.debian.org/security/2012/dsa-2543 Debian Security Information: DSA-2545 (Google Search) http://www.debian.org/security/2012/dsa-2545 http://security.gentoo.org/glsa/glsa-201309-24.xml https://security.gentoo.org/glsa/201604-03 http://lists.xen.org/archives/html/xen-announce/2012-09/msg00003.html http://www.openwall.com/lists/oss-security/2012/09/05/10 RedHat Security Advisories: RHSA-2012:1233 http://rhn.redhat.com/errata/RHSA-2012-1233.html RedHat Security Advisories: RHSA-2012:1234 http://rhn.redhat.com/errata/RHSA-2012-1234.html RedHat Security Advisories: RHSA-2012:1235 http://rhn.redhat.com/errata/RHSA-2012-1235.html RedHat Security Advisories: RHSA-2012:1236 http://rhn.redhat.com/errata/RHSA-2012-1236.html RedHat Security Advisories: RHSA-2012:1262 http://rhn.redhat.com/errata/RHSA-2012-1262.html RedHat Security Advisories: RHSA-2012:1325 http://rhn.redhat.com/errata/RHSA-2012-1325.html http://secunia.com/advisories/50472 http://secunia.com/advisories/50528 http://secunia.com/advisories/50530 http://secunia.com/advisories/50632 http://secunia.com/advisories/50689 http://secunia.com/advisories/50860 http://secunia.com/advisories/50913 http://secunia.com/advisories/51413 http://secunia.com/advisories/55082 SuSE Security Announcement: SUSE-SU-2012:1129 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html SuSE Security Announcement: SUSE-SU-2012:1132 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html SuSE Security Announcement: SUSE-SU-2012:1133 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html SuSE Security Announcement: SUSE-SU-2012:1135 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html SuSE Security Announcement: SUSE-SU-2012:1162 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html SuSE Security Announcement: SUSE-SU-2012:1202 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00024.html SuSE Security Announcement: SUSE-SU-2012:1203 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00026.html SuSE Security Announcement: SUSE-SU-2012:1205 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00027.html SuSE Security Announcement: SUSE-SU-2012:1320 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html SuSE Security Announcement: openSUSE-SU-2012:1153 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-09/msg00051.html SuSE Security Announcement: openSUSE-SU-2012:1170 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00016.html SuSE Security Announcement: openSUSE-SU-2012:1172 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html SuSE Security Announcement: openSUSE-SU-2012:1174 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html SuSE Security Announcement: openSUSE-SU-2012:1572 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html SuSE Security Announcement: openSUSE-SU-2012:1573 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html http://www.ubuntu.com/usn/USN-1590-1
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.