Test ID:	1.3.6.1.4.1.25623.1.0.871723
Category:	Red Hat Local Security Checks
Title:	RedHat Update for expat RHSA-2016:2824-01
Summary:	The remote host is missing an update for the 'expat'; package(s) announced via the referenced advisory.
Description:	Summary: The remote host is missing an update for the 'expat' package(s) announced via the referenced advisory. Vulnerability Insight: Expat is a C library for parsing XML documents. Security Fix(es): * An out-of-bounds read flaw was found in the way Expat processed certain input. A remote attacker could send specially crafted XML that, when parsed by an application using the Expat library, would cause that application to crash or, possibly, execute arbitrary code with the permission of the user running the application. (CVE-2016-0718) Red Hat would like to thank Gustavo Grieco for reporting this issue. Affected Software/OS: expat on Red Hat Enterprise Linux Desktop (v. 6), Red Hat Enterprise Linux Server (v. 6), Red Hat Enterprise Linux Server (v. 7), Red Hat Enterprise Linux Workstation (v. 6) Solution: Please Install the Updated Packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-0718 http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html BugTraq ID: 90729 http://www.securityfocus.com/bid/90729 Debian Security Information: DSA-3582 (Google Search) http://www.debian.org/security/2016/dsa-3582 http://seclists.org/fulldisclosure/2017/Feb/68 https://security.gentoo.org/glsa/201701-21 http://packetstormsecurity.com/files/141350/ESET-Endpoint-Antivirus-6-Remote-Code-Execution.html http://www.openwall.com/lists/oss-security/2016/05/17/12 RedHat Security Advisories: RHSA-2016:2824 http://rhn.redhat.com/errata/RHSA-2016-2824.html RedHat Security Advisories: RHSA-2018:2486 https://access.redhat.com/errata/RHSA-2018:2486 http://www.securitytracker.com/id/1036348 http://www.securitytracker.com/id/1036415 http://www.securitytracker.com/id/1037705 SuSE Security Announcement: SUSE-SU-2016:1508 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.html SuSE Security Announcement: SUSE-SU-2016:1512 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.html SuSE Security Announcement: openSUSE-SU-2016:1441 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.html SuSE Security Announcement: openSUSE-SU-2016:1523 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.html SuSE Security Announcement: openSUSE-SU-2016:1964 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html SuSE Security Announcement: openSUSE-SU-2016:2026 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html http://www.ubuntu.com/usn/USN-2983-1 http://www.ubuntu.com/usn/USN-3044-1
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.